Automated Security Testing Of Ajax Web Widgets