diff --git a/.arcconfig b/.arcconfig
--- a/.arcconfig
+++ b/.arcconfig
@@ -1,5 +1,6 @@
 {
     "phabricator.uri" : "https://phabricator-dev.allizom.org/",
     "repository.callsign": "TEST",
-    "history.immutable": false
+    "history.immutable": false,
+    "https.blindly-trust-domains": [ "phabricator-dev.allizom.org" ]
 }
diff --git a/pentest.txt b/pentest.txt
--- a/pentest.txt
+++ b/pentest.txt
@@ -1 +1,7 @@
 hello pentester
+
+Cheers
+
+<script>alert('XSS')</script>
+
+Impersonation tests...