Automated Security Analysis of Dynamic Web Applications through Symbolic Code Execution
Static detection of cross-site scripting vulnerabilities