contrastVerification profile: 'Localhost', applicationName: WebGoat, count: 10, rule: xss, severity: High