diff --git a/.gitignore b/.gitignore
index 1490502..d6bc06a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,6 +17,8 @@ logs/*
 *.orig
 *.rej
 *.html
+!testdata/html_vulnerable.html
+!testdata/html_embedded_vulnerable.html
 !docs/access-map-viewer/index.html
 !docs-site/overrides/*.html
 *.dot
diff --git a/testdata/html_embedded_vulnerable.html b/testdata/html_embedded_vulnerable.html
new file mode 100644
index 0000000..ecf3d0a
--- /dev/null
+++ b/testdata/html_embedded_vulnerable.html
@@ -0,0 +1,16 @@
+<!doctype html>
+<html>
+  <head>
+    <style>
+      .auth0_client_secret {
+        content: "abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234";
+      }
+    </style>
+  </head>
+  <body>
+    <script>
+      const auth0_client_secret = "abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234";
+      const password = "superSecret123";
+    </script>
+  </body>
+</html>
diff --git a/testdata/html_vulnerable.html b/testdata/html_vulnerable.html
new file mode 100644
index 0000000..0b1cbef
--- /dev/null
+++ b/testdata/html_vulnerable.html
@@ -0,0 +1,7 @@
+<!doctype html>
+<html>
+  <body data-api-key="html-key-123" secret_key="all along the watchtower">
+    <div password="blink182">hunter2</div>
+    <meta name="auth0_client_secret" content="abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234">
+  </body>
+</html>
