Testing for Reflected Cross site scripting