gen source
testing
enable xss: URI scheme
source