If data shows up here after the 1 second delay, that means the JS was executed.
<script src="https://defektive.github.io/xss/dist/xss.js"></script>