Question

alert(document.domain);

Answer 1

${\red{Olá\: tudo\: bem?}}$

${\blue{vamos\: lá }}$

For this, “alert(1)” is changed to “alert(document. domain)”. These are just to prove the vulnerability; for attacks in the wild, a victim of an XSS attack usually will not be able to see anything while his/her browser will perform the attacker's desired actions.

${\pink{espero\: ter\: ajudado}}$

${\purple{da \: melhor \: resposta por \: favor}}$

$\boxed{ass: \: Um :\ Ajudante \: Especial}$