xss 3 DOM XSS in document.write sink using source location.search Aug 2, 2025 Stored XSS into HTML context with nothing encoded Jul 31, 2025 Reflected XSS into HTML context with nothing encoded Jul 28, 2025