Text this: Towards cross-site scripting vulnerability detection in mobile web applications