Reflected XSS into HTML context with all tags blocked except custom ones 1 Reflected XSS into HTML context with all tags blocked except custom ones 10/01/2025