Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped 1 XSS Lab 19 Jan 10, 2025