XSS Challenge

Submit your payload

Craft a URL that triggers an alert() popup when visited. Paste it below — our headless browser will visit the URL and verify the popup fires.

The URL must point to this challenge's domain.