[Mutillidae] DOM XSS etc.

I have started the catch up all the definitions also catch up the fundamentals again.

I did some testing on owasp 

I wasnt able to intercept the request but then I was trying to modify the URL

by adding a simple alert

though I at least got some issues on the webpage

then when I was looking in the code I find the following function that was hardcoded

so I was thinking what if I add the script tag and close tag then afterwards execute mine

alert("dom%20injection")

Voila :=)

I did another example from owasp 

then I checked the code

so I wrote "test" then I closed the html tag then adding the ending html tag and then my function

closeme">alert("hello")