XSS sample page.
Although some pages execute alert('xss'), they are not dangerous.
Feel free to click links.

• jQuery.html() sample (executes XSS)
• innerHTML sample (executes XSS)
• CSP sample (executes XSS)
• CSP script-src without unsafe-inline sample
• CSP self only sample
• CSP nonce sample
• CSP nonce DOM sample
• CSP strict-dynamic sample
• CSP nonce DOM Based XSS sample (executes XSS)
• CSP Trusted Types sample
• CSP Trusted Types with DOMPurify sample