dom-xss-points.txt

document.write(...)
document.writeln(...)
document.body.innerHtml=...
document.forms[0].action=...
document.attachEvent(...)
document.create...(...)
document.execCommand(...)
document.body. ...
window.attachEvent(...)
document.location=...
document.location.hostname=...
document.location.replace(...)
document.location.assign(...)
document.URL=...
window.navigate(...)