dom-xss 1 XSS Lab #10 - DOM XSS in document.write Sink Using source location.search Inside a Select Element May 18, 2026