Cross-Site Scripting (XSS) attacks and defense mechanisms: classification and state-of-the-art
Static detection of cross-site scripting vulnerabilities