2007-02-20 Scanning Ajax for XSS Entry Points http://www.net-security.org/dl/articles/Scanning_Ajax_for_XSS_entry_points.pdf