JS line: /JS (\) >> /OpenAction << /S /JavaScript /JS \(app.alert\('Hacked!'\)\) >>)
[FIXED] Parentheses are escaped - injection prevented