title: why is this xss not working
body: <p>I am just trying to exercise on xss and I want the alert box to pop up on echo which should work on echo. I am doing exercises based on concepts and hier I have a wrong usage of htmlspecialchars, which is vulnerable to xss. However this is not really working and I don't get why. here is my code</p>
  
  <pre><code>$name=htmlspecialchars($_GET['myname']);
  
  
  echo "&lt;HTML&gt;&lt;body&gt;";        
  echo '&lt;form action=""&gt;';
  echo "name: &lt;input type='text' name='myname' &gt;&lt;br&gt;";
  
  echo "&lt;input type='submit' &gt;&lt;/form&gt;";
  
  echo $name; // here I want the xss to execute a popup box
  
  echo "&lt;/HTML&gt;&lt;/body&gt;";
  </code></pre>
  
  <p>The input script looks like this.</p>
  
  <pre><code>&lt;script&gt;alert();&lt;/script&gt;
  </code></pre>
  
  <p>I have also tried many alternatives. The script is displayed as I typed it and there is not alert box. </p>