Playing around with DOM XSS (Demo included)