Attempt to populate resources with an XSS injected string