Code Review: Detecting and Preventing XSS Vulnerabilities