r2c blog — Exploiting dynamic rendering engines to take control of web apps GitHub - returntocorp/semgrep: Lightweight static analysis for many languages.