1. A method for analyzing a web application to detect inline code, the method comprising: performing data flow analysis of the web application to approximate output of the web application; parsing data representative of the approximated output to identify any inline code; rewriting the identified inline code to code in external code files; transforming the web application into a transformed application that references the code in the external code files; enabling execution of the code in the external files referenced by the transformed applications; and if inline code is identified in the transformed application, not allowing execution of the identified inline code.