Phase 3 Test Payloads

• 3.1 - HTML comment injection
• 3.2 - noscript tag injection
• 3.3 - SVG text injection
• 3.4 - data-* / aria-label injection
• 3.5 - Plain text injection
• 3.6 - JSON response injection
• 3.7 - HTTP response header injection (inspect with curl -sI)
• 3.8 - Redirect chain
• 3.9 - GitHub Gist (external)
• 3.10 - Large page (~400KB)