I am currently testing XSS filter and I wonder, whether it is possible to demonstrate XSS attack on class tag attribute in HTML, when only double quotes are escaped. Other characters (<, >, ') are unescaped.
Code I am testing it on looks like this:
<span class="MY_VALUE"> Test </span>
I was not able to find any example of how to inject script in this tag. Thanks for any help.