big-list-of-naughty-strings by Max Woolf.
From the webpage:
The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
You won’t see any of these strings on the Tonight Show with Jimmy Fallon. 😉
They are “naughty” when used as user-input data.
For those searching for a starting point for legal liability, failure to test and/or document testing against this data set would be a good place to start.
Have you tested against the big-list-of-naughty-strings?