adding information_leakage and sql_injection attacks