payload: - "\'-alert(1)//" - 'confirm.call(null,1)' - 'alert.call(%20, "XSS");' - "123) AND 12=12 AND JSON_DEPTH('{}') != 2521" - "alert.apply(null, [1])" encoder: - Plain placeholder: - SOAPBody type: SOAP