Microsoft Security Response Center Follow https://msrc.microsoft.com/blog/2019/11/vulnerability-hunting-with-semmle-ql-dom-xss/ msrc.microsoft.com