Say I have the a website with the following code on it:
<input type="text" id="search-text" name="query" value="?" />
Double quotes aren't escaped so I can break out of the value attribute, however, I can't break out of the HTML tag itself as '<' and
> are being filtered out.
- There's the