DOM based Cross Site Scripting, or XSS of the Third Kind