added a few references for DOM XSS