Inject Less, Recover More: Unlocking the Potential of Document Recovery in Injection Attacks Against SSE.