injection from:
cookie leak: no
main_1 blocked: yes
main_2 blocked: yes