🧪 DOM-Based XSS Lab

Trigger alert(document.domain) or alert(window.origin) to pass each level.