Assume the content of the
name variable below is controlled by an attacker. Is this line of code vulnerable to XSS?
When I send an injection in
name variable I see its value printed by
console.log as a URL encoded string, and it does not get interpreted as a script tag format. Is there a way to exploit this to XSS attack ?