Eventidle
① Choose or edit a payload → ② Submit → ③ Inspect the browser result
Attacker inputcode editor
raw payload
…
storeloadhtml
XSS Simulation Board
Trace input through to the browser result
Event: idle
① Choose or edit a payload → ② Submit → ③ Inspect the browser resultexecution or event = warning · text rendering = expected
Attacker inputcode editor
raw payload
…
storeloadhtml
DB serverstored rows
stored record
Front server renderrender(input)
…
rendered HTML
…
Front clientbrowser preview
idle