Tester for cross-site scripting