Testing For Code Injection