I've never used the web wallet, but if suspect the problem is on your end - some malware or malicious browser extension you installed. Anyone can look at the client side source code for the web wallet, I'm guessing it's totally benign.