omplSome browser security mechanisms prevent script tags from attacker$-$provided content from being executed. In some cases, this can be circumvented by putting the script in the src attribute of an iframe element as a JavaScript URL.A The team identified the Juice Shop search URL as vulnerable:$/$search$?$q$=$ATTACK$\_$STRING$\_$HERE. Research how to construct a JavaScript URL and perform a reflected XSS attack to run an alert command in JavaScript at this endpoint. Document the attack string that can be used to execute the alert function ftom the $/$search endpoint.