Injection Attacks Against End-to-End Encrypted Applications