diff --git a/scripting/tests/data/server_error.csv b/scripting/tests/data/server_error.csv
new file mode 100644
index 0000000000000000000000000000000000000000..3e770df012f65d73ce4721a5f65d7e3f39959519
--- /dev/null
+++ b/scripting/tests/data/server_error.csv
@@ -0,0 +1 @@
+Hi,  this line contains a unicode backspace. This causes a server error, when pandas_table_preview.py's output is serialized into XML.
\ No newline at end of file
diff --git a/scripting/tests/data/xss_attack.csv b/scripting/tests/data/xss_attack.csv
new file mode 100644
index 0000000000000000000000000000000000000000..e7d43505aef42c397f1859805bc87aab8b6da1a2
--- /dev/null
+++ b/scripting/tests/data/xss_attack.csv
@@ -0,0 +1,8 @@
+# as it seems all these characters are escaped correctly.
+"![Alt text](url/to/image)","%3C","&lt","<","&LT","<","&#60","&#060","&#0060","&#00060"
+"&#000060","&#0000060","<","<","<","<","<","<","&#x3c","&#x03c"
+"&#x003c","&#x0003c","&#x00003c","&#x000003c","<","<","<","<","<","<"
+"&#X3c","&#X03c","&#X003c","&#X0003c","&#X00003c","&#X000003c","<","<","<","<"
+"<","<","&#x3C","&#x03C","&#x003C","&#x0003C","&#x00003C","&#x000003C","<","<"
+"<","<","<","<","&#X3C","&#X03C","&#X003C","&#X0003C","&#X00003C","&#X000003C"
+"<","<","<","<","<","<","\x3c","\x3C","\u003c","\u003C"