Reflected XSS into HTML context with all tags blocked except custom ones 1 Reflected XSS into HTML context with all tags blocked except custom ones Jan 10, 2025