Thanks for your comment! I just built it under an hour to showcase the capability of Serverless computing :-) I'll take care of sanitizing the inputs now.
Update: Has been fixed now.
Still able to XSS with link 2.
That must be an old link. I have left them untouched.