String solving with word equations and transducers: towards a logic for analysing mutation XSS