Taint-enhanced policy enforcement: A practical approach to defeat a wide range of attacks
Securing web application code by static analysis and runtime protection