Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped 1 XSS Lab 20 17/01/2025