Assertion: website's url | /r/HasProperty | constructed by the attacker
Facets:
Source sentences:
text: If the user visits the URL constructed by the attacker, then the attacker's script executes in the user's browser, in the context of that user's session with the application.