Lab: DOM XSS via client-side prototype pollution
Lab: DOM XSS via an alternative prototype pollution vector