Just encounter wonderful Akamai WAF filter bypass XSS with DOM clobbering, thanks @VirenPawar_ for getting me back on the track.