Domanda di colloquio di Crunchyroll

How can you identify a XSS attack on a submit button?