DOM-based XSS
- The third and final type of XSS is another Non-Persistent type called DOM-based XSS.
- DOM XSS is completely processed on the client-side through JavaScript
- DOM XSS occurs when JavaScript is used to change the page source through the Document Object Model (DOM).
innerHTMLfunction does not allow the use of the<script>tags within it as a security feature.