Testing for OWASP 2017: Cross Site Scripting