Text this: An approach of security testing for third-party component based on state mutation.