Spent the past hour trying to xss multiple google websites
you might have more luck looking for IDORs/other authentication issues, rather than XSS.
oh yeah ig they could just use like dompurify and it wouldn’t work