[xss] lab reflected xss with event handlers and hr 30c175830d9c4726b6106abb9d3a3dc1
[XSS] Lab: Reflected XSS with event handlers and href attributes blocked
so injecting a vector means using tags like
so we can see we already have two tags with a 200: