document-write 2 PortSwigger: DOM XSS via document.write Inside a select Element Aug 30, 2026 DOM XSS in document.write sink using source location.search Aug 24, 2026