IAST Client SQL Injection

Exercises openDatabase() and tx.executeSql(). Browsers may block WebSQL; the hooks should still be hit where available.