QA Fundamentals · Middle · Question 47 of 75

Which input can reveal an XSS problem?

Show the answer

Correct answer: <script>alert(1)</script> in a field that is shown later

Explanation

If the text is rendered as HTML instead of plain text, the script runs. Testers check that such input is displayed literally or safely escaped.

Further reading

Problem with a question

QA Fundamentals · Middle · question 47

Test yourself

Take the QA Fundamentals · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.

Take this quiz