https://thedefenderz.io/dom-based-xss-explained-in-2025/