XXS Exploits via AJAX

The next exercise for the XXS exploit modal is stored XXS via AJAX. Ajax is a client-side script that communicates to and from a server/database without the need for a postback or a complete page refresh. Ajax allows a web programmer to transfer data without needing to refresh an entire page. Google Maps, YouTube, and Facebook all use Ajax. Gruyere uses ajax to send post information to the view using this code: _feed(( { "private_snippet": "" ,"cheddar": "Gruyere is the cheesiest application on the web." ,"brie": "Brie is the queen of the cheeses!!!" } )). Not having a lot of experience with AJAX or its syntax it was hard for me to formulate different posts to get stored XXS. Even after checking the first and second hints. The final result makes sense, but without knowing the syntax of AJAX it would be difficult to exploit. I will continue to look over the basics of Ajax before starting on the next exercise of reflected XXS using AJAX.