Overview & safety
Cross-Site Scripting (XSS) occurs when untrusted input is included in web pages without proper separation between data and executable contexts. XSS enables attackers to run scripts in users' browsers, potentially stealing tokens, performing actions as the user, or altering page content. Always test only in lab environments or with written authorization. Never use techniques on systems you do not own.
What XSS is and responsible testing rules.