Testing CSS-Injection