Process of building a DOM XSS chrome extension scanner

• Attacker-controlled sources
• Injection sinks
• Chrome DevTools