https://waibui.github.io/posts/portswigger-lab-dom-based-vulnerabilities/