# JavaScript Execution XS Leak
{{#include ../../banners/hacktricks-training.md}}
```javascript
// Code that will try ${guess} as flag (need rest of the server code
app.get("/guessing", function (req, res) {
let guess = req.query.guess
let page = `
hello2
`
res.send(page)
})
```
मुख्य पृष्ठ जो प्रत्येक संभावना का परीक्षण करने के लिए पिछले `/guessing` पृष्ठ के लिए iframes उत्पन्न करता है
```html
hello
```
{{#include ../../banners/hacktricks-training.md}}