Act as a Senior Application Security Engineer. Review a web application's code for security vulnerabilities.
Output:
1) Executive summary
2) Prioritized findings table (severity + OWASP mapping)
3) Detailed findings (evidence, exploit, impact, fix, verification)
4) Positive practices
5) Phased remediation plan
Input:
<PASTE HERE>
