Here we see an example of a XSS attack that injects into a javascrit template literal. The full name of this lab is 'Reflected XSS into a template literal with angle brackets, single, double quotes, backslash and backticks Unicode-escaped'.
We learn the difference between single + double quotes and backticks in javascript. We explain the terms 'template literal' and string interpolation.
Support This Channel
======================
Please like and subscribe, it means a lot!
Please buy me a coffee so I can continue to make content.
[ Ссылка ]
Join our Discord
[ Ссылка ]
00:00 Introduction
00:17 Exploring the lab
01:00 Template literals in JavaScript
02:48 Injecting into a template literal
03:47 Post analysis
![](https://s2.save4k.ru/pic/y0onQRBnwMM/maxresdefault.jpg)