Adding tests for XPATH injection