Xss
## Local POC Setup
Save the code below as `xss-poc.html` and open it in a browser. Set a test cookie via developer tools (Application > Cookies > add `session=abc123`). This simulates the /login error page and a stored comments section.[3]
```html
<!DOCTYPE html>
<html>




