Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis. - Philipp Vogt; Florian Nentwich; Nenad Jovanovic; Engin Kirda; Christopher Krügel; Giovanni Vigna (NDSS, 2007)