XSS-Catcher: blind XSS detection framework