Text this: Blending Static and Dynamic Analysis for Web Application Vulnerability Detection: Methodology and Case Study