Snack API XSS Vulnerability

Warning: This API is a ticking time bomb of snack-based chaos.

As a seasoned security expert, you've been tasked with identifying the vulnerabilities in our Snack API.

Here are the known issues:

• Cross-Site Scripting (XSS) Vulnerability: Our JavaScript is written in a language only our developers can understand.
• SQL Injection Vulnerability: Our database is filled with snack-related puns.
• XML External Entity (XE) Vulnerability: Our XML is only used for decorative purposes.

Report any issues to our Snack Bug Report team.