Includes models-as-data rows, flow sources, and XSS sanitizers. Tests for models-as-data rows not included.