1. A method for automatic correction of security downgraders, comprising: performing a security analysis that disregards existing user-provided downgraders to detect flows that are vulnerable; locating candidate downgraders on said flows; determining whether each of the candidate downgraders protects against all vulnerabilities associated with each downgrader's respective flow; and transforming with a processor candidate downgraders that do not protect against all of the associated vulnerabilities, such that the transformed downgraders do protect against all of the associated vulnerabilities.