searches web application source code for URLs to pass to a scanner