Exploiting Limited Markup Features on Web Applications Application Security Exploiting Limited Markup Features on Web Applications