You are about to delete records about name: <img src=x onerror=alert('HACKED')> email: test@test.fr
This cannot be undone