publication Thesis 2014 web application security XXS attack more of publication web application security XXS attack 2014