dom-xss 3 PortSwigger: Stored DOM XSS Sep 1, 2026 PortSwigger: DOM XSS in AngularJS expression with angle brackets and double quotes HTML-encoded Aug 31, 2026 PortSwigger: DOM XSS via document.write Inside a select Element Aug 30, 2026