Google is in the process of developing a security tool to automatically find cross-site scripting holes in its web applications. Code-named "Lemon", which Google says is derived from the term for a ...