I'm researching XSS vulnerabilities in a web application which uses continuations. That means that for a given form, the URI the form data is posted to is unique and different every time.
A first GET request displays the form with its unique URI such as:
Then the submit action does the POST request.
Is there any free (or better open source) security scanner which understands continuations and is able to do the GET request before each POST request the fuzzer is trying to send ?