https://justice-reaper.github.io/posts/XSS-Lab-5/
DOM XSS in jQuery anchor href attribute sink using location.search source - Justice-Reaper