bWAPPA3 - Cross-Site Scripting XSSCross-Site Scripting - Reflected (Custom Header)Cross-Site Scripting - Reflected (Custom Header) <script>alert("daniil")</script> Вставляем в новое поле, которые сами прописываем bWAPP:
