Every deliberate flaw in this app, the feature it lives inside, the taint
source it starts from and the sink it reaches. Each trigger is a single URL
that exercises the flow on load, so the whole catalogue can be driven
without clicking anything. This table and the harness in
run-eschromium.sh read the same file, catalog.js,
so a feature added without a row here shows up as a gap rather than going
quietly untested.
| Feature | Source | Sink | Detector | Trigger |
|---|