Inert DOM transformation sink

This page models a DOM transformation sink without executing or reflecting arbitrary code.

The illustrative sink is shown only as escaped text: preview.innerHTML = candidate. The response enforces script-src 'none' and connect-src 'none'.

Only these enum values are accepted. No supplied payload is executed, stored, or reflected.

Measurement marker: ARN-BOUNDARY-XSS-SINK