DOM-based XSS

XSS where the page's own JavaScript writes attacker-controlled data into the document unsafely, without the server reflecting it.

Learn it hands-on