Security Testing of Web Applications: A Search-Based Approach for Cross-Site Scripting Vulnerabilities
Pixy: a static analysis tool for detecting Web application vulnerabilities