XAVIER: Grammar-Based Testing for XML Injection Attacks. - Paul Kalbitzer; José Antonio Zamudio Amaya; Andreas Zeller (ISSTA Companion, 2025)