Detecting Cross-Site Scripting in Web Applications Using Fuzzy Inference System

Figure 3

Locations vulnerable to DOM-based XSS attacks.