Warning: real XSS laboratory

This exercise is intentionally vulnerable. JavaScript entered by you or other visitors can change the page, redirect your browser or make network requests. Do not enter real passwords or personal data. Use a separate browser profile for these exercises.

Shared comments are cleared daily at 23:00 UTC. The reset does not protect against code executed before it.