What is Cross-Site Scripting (XSS)?
When you use content created by your website visitors as part of your display content on your webpage, you are opening yourself up to an attack known as XSS.
You need to understand this to know why it is important to always sanitize data that comes from the user.
HTML GIST: https://gist.github.com/prof3ssorSt3v3/0198bd3d16b7ee25a4ee29c72868b05e
Link to OWASP site: https://www.owasp.org/index.php/Cross-site_Scripting_(XSS)
Open Web Application Security Project (OWASP)
JSON GIST: https://gist.github.com/prof3ssorSt3v3/b88b372c941fe4beff4b3cf063e778da