To reduce the false positive rate in my project where used libinjection Try to add fingerprints for XSS detection in libinjection Still in testing
Anyway,many thanks for client9 's great work! Libinjection original address: https://github.com/client9/libinjection