As you can see, all fields that I send only the attributes
> are coded, so they are not executing in the browser. Is there any way to bypass this XSS filter? In my case, only these attributes are encoded.
<h1 class="StoreTitle__StyledStoreTitle-qk8d4w-0 dRnViH"><script>alert(1)</script></h1>