Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped 1 XSS Lab 19 10/01/2025