Fictional Application
ShopNest Product Reviews
Consumer Electronics & Gadget Marketplace
ShopNest enables verified buyers to write reviews for electronics. To mitigate XSS, the backend checks for `<script>` and `onerror` in reviews and strips them. Evaluate whether this blacklist adequately secures the review section.
🎯 Assessment Objective
Bypass the review filter and trigger persistent JavaScript execution on the product page.
Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.