Statically Checking XSS Risks in TypeScript Projects with TSEC