Objective
Write a basic alert script in the box, like the following and click the search button.
This will pop an alert on the page.
Also if you view the page source you can see our payload.
Reflected XSS with AngularJS expression escape and CSP
The first step of the payload is to set the location property which is a built-in JavaScript object that represents the URL of the current page, and setting it to a new URL is constructed using a template string that includes the following components...
