Full flow: DataTransfer injection, change fires, success URL extracted.