Web vuln proof forced #to_s

Proof for web vulnerabilities is now forced to a string for good measure.