Frontend Security: Applying Contextual Escaping Automatically, or How to Stop XSS in Seconds
Efficient Context-sensitive Output Escaping for Javascript Template Engines
