PWPP

Practice session

An application's search endpoint: `GET /search?q=apple`. The response: `<p>Results for: apple</p>`. Testing with `q=</p><script>alert(1)</script>` reflects in HTML without encoding. Which Burp Suite technique most efficiently tests for additional XSS injection points across the entire application?

Loading your practice session…