title: Is an XSS attack possible when a script is displayed in an HTML textarea?
body: <p>I have an HTML textarea in my UI (for a Java-based web app) where a user can enter any value. Once it is saved, it is displayed in the textarea (which is disabled) in the browser.</p>
  
  <p>If a user enters any script as free text in the textarea, will it be executed as a script (even if the value is shown in the textarea, and not not as label/text)?</p>