Authorization Headers

This release fixes a bug described in #14 in which authorization headers were not being properly passed to the xss detectors.

All of the HTTP request headers will now be passed directly to xss detectors.

Active Scanner, DOM-XSS and more

1.3.0

Merged scanner and develop

Event Handlers

Thanks to @f-block for adding the ability to test vulnerabilities introduced via event handlers, such as onmouseout. When phantom.js receives a response it is designed to hover on each element of the page, in an attempt to trigger the appropriate event handlers.

Cleaned up the GUI a bit, and added the ability to dynamically generated payloads (thanks again, @f-block)

Slimer.JS Implemented

• _Slimer.JS_ Added support for slimer.js, a scriptable gecko engine.