are modified (e.g. by filtering) to become valid, typically a protection scheme
failure.
5) Malformed or non-conformant manipulations that are treated as valid outside the
product. These occur frequently in browser-specific XSS variants or in proxies