Reflected XSS into attribute with angle brackets HTML-encoded 1 Reflected XSS into attribute with angle brackets HTML-encoded Jan 6, 2025