We allow direct injections into base tags to reduce false positives.