https://glc.st/posts/vulnerability-cross-site-scripting-aka-xss/