xhr injection phrase 1