hex0xf

iframe reflective XSS attack

3

### Describe the bug ``` function Test () { let i = 'javascript:alert(1);' return ( ) } ``` When setting javascript:alert(1) on the iframe's src, an XSS attack will be...