Detecting Cross Site Scripting vulnerabilities in web applications