A tool for finding Cross Site Scripting vulnerabilities in web applications