Pergunta de entrevista da empresa Crunchyroll

How can you identify a XSS attack on a submit button?