URL payload injected

The payload javascript:alert('1') was appended to the URL fragment.