JSFlow: tracking information flow in JavaScript and its APIs
Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis