https://dejavuhyo.github.io/posts/improper-neutralization-of-script-related-html-tags/