message: Clarify sarcasm in "XSS Tier 1.5" hint
diff: category: 'XSS'
  description: 'Perform an XSS attack with <code>&lt;script&gt;alert(`xss`)&lt;/script&gt;</code> on a legacy page within the application.'
  difficulty: 2
  - hint: 'What is better than homegrown validation based on a RegEx? Homegrown sanitization based on a RegEx!'
  + hint: 'What is even "better" than homegrown validation based on a RegEx? Homegrown sanitization based on a RegEx!'
  hintUrl: 'https://bkimminich.gitbooks.io/pwning-owasp-juice-shop/content/part2/xss.html#perform-an-xss-attack-on-a-legacy-page-within-the-application'
  key: usernameXssChallenge
  -
  