Anyone know of static analysis tools that find potential XSS/etc issues in your frontend (such as the innerHtml message) and backend code?