Testing for DOM-based Cross site scripting