<html>
  <head><title>Address based DOM XSS</title></head>
  <body>
    <script>
      var payload = window.location.hash.substr(1);var div = document.createElement('div');
div.innerHTML = '<div onclick=\'' + payload.replace(/'/g, '"') + '\'>div</div>';
document.documentElement.appendChild(div);

    </script>
  </body>
</html>
