XSLT Security Scanner