Davide Balzarotti Marco Cova Viktoria Felmetsger Nenad Jovanovic Engin Kirda Christopher Kruegel Giovanni Vigna Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications. 387-401 2008 IEEE Symposium on Security and Privacy http://doi.ieeecomputersociety.org/10.1109/SP.2008.22 conf/sp/2008 db/conf/sp/sp2008.html#BalzarottiCFJKKV08