HackerOne interview question

XSS how does it work, some bypasses.