# Lab 1: Reflected XSS into HTML context with nothing encoded {% embed url="" %}