Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped 1 Reflected XSS into a JavaScript string with angle brackets and double quotes HTML-encoded and single quotes escaped Jan 10, 2025