Solve Instruction
The attacker can control a url which is used to load a script.
Script Injection
SCRIPT src
Atest
Sponsored by BlueClosure
www.blueclosure.com
the leading platform for JavaScript Security.