<%= name %>

Query

<% groupedSinkData.query.forEach(function(sink) { %> <% ['unsafe', 'safe', 'noop'].forEach(function(safety) { %>

<%= sink.url %>/<%= safety %>?input=<script>alert(1);</script>

<% }); %> <% }); %>

Params

<% groupedSinkData.params.forEach(function(sink) { %> <% ['unsafe', 'safe', 'noop'].forEach(function(safety) { %>

<%= sink.urlWithoutParams %>/<script>alert(1);</script>/<%= safety %>

<% }); %> <% }); %>