References https://developer.aliyun.com/article/1620395 https://github.com/SunnyCcc/-/blob/master/%E5%AF%B9%E4%B8%80%E4%B8%AA%E5%9F%BA%E4%BA%8E%E6%A8%A1%E7%B3%8A%E6%B5%8B%E8%AF%95%E7%9A%84XSS%E6%BC%8F%E6%B4%9E%E6%A3%80%E6%B5%8B%E7%B3%BB%E7%BB%9F%E7%9A%84%E7%A0%94%E7%A9%B6.md https://www.k0rz3n.com/2019/02/26/KameleonFuzz%EF%BC%9A%E9%BB%91%E7%9B%92XSS%E6%A3%80%E6%B5%8B%E7%9A%84%E8%BF%9B%E5%8C%96%E6%A8%A1%E7%B3%8A%E6%B5%8B%E8%AF%95/ https://www.cnblogs.com/qcloud1001/p/6650199.html https://github.com/Asperis-Security/xssFuzz https://swarm.ptsecurity.com/fuzzing-for-xss-via-nested-parsers-condition/ https://blog.ostorlab.co/dom-xss-pt1.html https://deepeddyinfosec.github.io/content/tutorials/Fuzzing%20for%20XSS%20with%20ZAP.pdf https://ieeexplore.ieee.org/document/9974833/ https://www.cnblogs.com/xdans/p/5412735.html