find xss vulnerability automatically