challenges blog leaderboard careers companies pricing

JavaScript URL

Cross-Site Scripting

Easy

Objective

User-controlled href. javascript: URLs are fun.

Submit Flag

Security training for developers who ship AI-generated code. Learn to spot vulnerabilities before attackers do.

Learn

Challenges
Careers
Pricing

Company

Security Review
For Teams
Hire Developers

Legal

Privacy Policy
Terms of Service
Educational use only

All vulnerabilities are intentional. Built for learning.

2026 alicesec