Securing Web Applications Through Vulnerability Detection And Runtime Defenses