You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
and you'll get your XSS. While the lab does get completed, the XSS doesn't trigger and firefox issues an error about content security policy: Content Security Policy: Couldn’t process unknown directive ‘script-src-elem’
This is because, as mentioned on the main CSP page, script-src-elem is a strictly chrome feature