A card built every link from a trusted id, and the tests pinned that rule for two of its three links. A change that drew the third link from server text kept every test green.
Pin a safety rule on every path it covers. A test on two of three paths lets the third drift.
Feed the hostile value in the fixture. A test without it cannot fail.
Feed the hostile value in the fixture. A test without it cannot fail.