1. A method comprising, statically analyzing a web application to detect when inline code is present, including performing static data flow analysis of the web application to approximate output of the web application, and parsing data representative of the approximated output to identify any inline code.