I should not appear in the results http://some-ref.com SQLI Neither do I http://some-other-ref.com XSS I see you http://ref.com FPD