DOM XSS — Quick Reference with Code Examples

DOM XSS happens when attacker-controlled data flows into a browser API that interprets that data as HTML, JavaScript, a URL, or another executable context. The core review model is: SOURCE → DATA FLOW