Overview & responsible testing
Reflected XSS occurs when user-controlled input in an HTTP request is immediately included in the response and executed in the victim's browser. It commonly appears on search pages, error messages, or any endpoint that reflects parameters. Always test only in lab environments or with written authorization. Never exploit reflected XSS on third-party or production sites without permission.
What reflected XSS is and safe testing rules.