dom-xss 1 Cross-Site Scripting (XSS): Context, Filter Bypasses, and a Blind Cookie Steal Oct 20, 2026