README

Drives real Express request handling with the tracer loaded, measuring default IAST per-request taint-tracking across a non-vulnerable endpoint and one with a command-injection sink.