Automatic Generation of XSS and SQL Injection Attacks with Goal-Directed Model Checking
Securing web application code by static analysis and runtime protection