Security Testing in JavaScript