add information leakage and sql injection tests