EY interview question

DOM xss Blind sqli etc