js字符串拼接 ·${}·

var a = 1;
console.log(`a的值是：${a}`); //a的值是：1

https://portswigger.net/web-security/cross-site-scripting/contexts/lab-javascript-template-literal-angle-brackets-single-double-quotes-backslash-backticks-escaped

https://xxxxxxxxxx.web-security-academy.net/?search=%24%7Balert%281%29%7D