I've come across an API of a web application I'm testing, which reflects with unescaped, unencoded, user-controlled data for some requests. However, the response includes the header
The response body is simply a JSON, like the following:
I did try to perform a simple XSS (classic
<script>alert(1)</script>), but the script isn't executed.
My question is if the
Content-Type header in the response has an impact on the exploitability of XSS and possibly other vulnerabilities?