For a customized online editor, I would like to automatically detect SQLi or XSS vulnerabilities and provide a convenient way to auto-correct them.
Rather than creating my own scanning/suggestion code, I would like to use an existing utility.
I'm not sure how XSS/SQLi scanners are typically designed, but I would preferably like one that suggests the correct fix, or otherwise identifies the exact location so that I can code in the fix suggester myself.
Is there such a vulnerability scanner for Perl? I assume it would have to de-construct the syntax to identify which variables are plain text, and which ones are HTML; or else the developer would have to indicate this as part of the variable name...