Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped 1 Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped Jan 17, 2025