innerHTML Has Five Doors. Most Reviews Only Watch One.

A DOM sink is easy to grep for. The hard part is that one sink has many sources, and the source is where the trust decision actually lives — not the assignment.