input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : direct user input in string no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath

input : shell commands no filtering sink : XPATH Query exec_query : xpath