detects XSS and SQL-injection vulnerabilities
