DOM XSS in document.write sink using source location.search inside a select element 1 XSS Lab 10 07/01/2025