Reflected XSS into a JavaScript string with single quote and backslash escaped 1 XSS Lab 18 10/01/2025