DOM XSS in innerHTML sink using source location.search 1 DOM XSS in innerHTML sink using source location.search 03/01/2025