defending against cross - site scripting attacks .
Securing web applications with static and dynamic information flow tracking