Blog routes — syntax is action="blog" get="…"
current_id (expect this page’s ID): 9
title of probe post 12: Probe <script>alert(1)</script> & “quotes”
permalink of 12: https://lite.buildprosites.com/blog/xss-probe/
date of 12: 2026-08-04
excerpt of 12: Probe target for escaping tests.
author_email of 12 — MUST be empty for anonymous (BUG-542):
Utility
math add 2+2 (expect 4): 4
math div 10/4 (expect 2.5): 2.5
math div by zero (expect 0, NOT a fatal): 0
format list normalise (expect a,b,c): a,b,c
date (expect today): 2026-08-04
cast int of 42.9 (expect 42): 42
url: https://lite.buildprosites.com/shortcodes-blog
quiet (expect NOTHING between arrows): →←
Escaping — BUG-543
Post 12’s title contains a real <script> tag. Above, it must appear as
visible text. If you see no text and no alert box, view source: the tag must be
<script>. An alert box is a FAIL.