Learn · 1/2

What happens?

XSS is the risk that untrusted content runs in unwanted ways in the victim’s browser. That is why output encode/escape matters.