Gary Wassermann Zhendong Su Static detection of cross-site scripting vulnerabilities. 171-180 2008 ICSE http://doi.acm.org/10.1145/1368088.1368112 conf/icse/2008 db/conf/icse/icse2008.html#WassermannS08