https://justice-reaper.github.io/posts/XSS-Lab-4/
DOM XSS in innerHTML sink using source location.search - Justice-Reaper