DOM-based cross-site scripting
Sources and sinks in third-party dependencies
DOM XSS combined with reflected and stored data