Test test test test and linkhttps://owasp.org/www-pdf-archive//DenimGroup_StaticAnalysisTechniquesForTestingApplicationSecurity_OWASPDenver_20080820.pdf