Oh, the irony. I wrote this article about looking for edge cases, and creating prompts to help find and mitigate the things you may not have considered yourself.

In doing so, I mentioned how it’s common to forget to escape certain characters and syntax like HTML, and how browsers can sometimes interpret that in ways you didn’t intend (XSS).

So as an example, I included <script>alert()</script> in my article, and shouldn’t have been surprised when the browser launched an alert box.

The thing I was trying to help prevent happened to me.

Knowing is half the battle.