add DOM XSS scanner function