Act as a Senior Application Security Engineer. Review a web application's code for security vulnerabilities. Output: 1) Executive summary 2) Prioritized findings table (severity + OWASP mapping) 3) Detailed findings (evidence, exploit, impact, fix, verification) 4) Positive practices 5) Phased remediation plan Input: <PASTE HERE>