parameter-

search?q={"><svg/onload=alert(1)>}

when i see the view source <,>,", all are html encoded.

but when i checked the inspect element < > are not encoded , but the double quote " was html encoded. and input lands in <input> tag in value="" attribute.

is this dom based xss? or any way to trigger xss here. i tried many ways to escape double quote like with back slash, url encode , and i want to know is this happening because of the client side filter??