finish up vulnerability check implementation for sensitive calls made within function definitions
added xss and code injection checkers