Second case – Reflected XSS