Fictional Application
RecipeShare Culinary
Community Recipe Notes & Kitchen Secrets
RecipeShare allows chefs to post kitchen notes and cooking tips on recipes. The developers noticed XSS attacks and implemented a filter that removes `<script>` tags from incoming notes. Test if this tag stripping routine can be bypassed.
🎯 Assessment Objective
Bypass the tag stripping filter and persistently execute JavaScript when recipe notes are viewed.
Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.