5. The method as recited in claim 4 , further comprising labeling a string to locate string-manipulating functions that modified the input and made the input specification-compliant.
4. The method as recited in claim 1 , further comprising comparing the context free grammar with a specification of the security-sensitive function such that if the grammar satisfies the specification, the input is considered properly downgraded.