https://ml1710bestcheapprice.blogspot.com/2023/10/avoiding-xss-when-echoing-posted-html.html