It is challenging to derive precise statistics
regarding the impact of any
particular approach to bug prevention:
our design patterns prevent XSS
bugs from being introduced in the first
place, but we do not know how many
bugs would have been introduced
without their use.