Abstract: A system for testing the susceptibility of an Internet website to process cross-site scripting instructions is disclosed. The system includes an Internet web browser, a web server and an extension module embedded within the Internet web browser. The extension module is made up of two distinct components, a sending component and a receiving component. Within the sending component, is a translator object coupled to a first reference source. Within the receiving component is an interceptor object coupled to a second reference source. Together, the sending component and receiving component are used to communicate cross-site scripting test commands and receive responses from the web server hosting the Internet website being targeted for testing.

Abstract: A method for estimating a quality of code coverage of a test is described. The method includes training a neural network, using the neural network to generate a risk factor for each code element, and determining a coverage quality based on risk factors of executed code elements and risk factors of unexecuted code elements. The neural network is trained by inputting suggestive data as input and error severity data as output. Suggestive data may be data that correlates to a likelihood that a code element contains an error, and the error severity data is an evaluation of a severity of any error that was present in the code element. A coverage quality can be determined based on the risk factors of the code elements tested during the test and the risk factors of the code elements not tested during the test.