All challenges
Code AnalysisBeginner 60s

Trace: Reflected XSS

Is input reflected without encoding?
Starter code
const input='<script>';
const output='<div>'+input+'</div>';
console.log(output.includes('<script>'))

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle