A 2-Layer Model for the White-Box Testing of Web Applications