const div = parent.document.createElement('div'); div.id = 'the-malware'; div.className = 'malware'; div.innerHTML = 'XSS Succeeded'; parent.document.getElementsByTagName('body')[0].appendChild(div); throw new Error('XSS Succeded');