Client-Side Template Injection (CSTI)