# JavaScript Uitvoering XS Leak
{{#include ../../banners/hacktricks-training.md}}
```javascript
// Code that will try ${guess} as flag (need rest of the server code
app.get("/guessing", function (req, res) {
let guess = req.query.guess
let page = `
hello2
`
res.send(page)
})
```
Hoofblad wat iframes genereer na die vorige `/guessing` bladsy om elke moontlikheid te toets
```html
hello
```
{{#include ../../banners/hacktricks-training.md}}