Reflected XSS into HTML context with nothing encoded - Web Security Academy Lab Solution