DOM XSS 2 Prototype Pollution: envenenando o Object do JavaScript 26/05/2026 XSS e HTML Injection: do espelho ao controle do navegador 06/04/2026