Payload types per field type as well as generic tests are conducted for all fields. Each are releated to web vulnerabilities (SQLi, XSS, Injection, etc.).