https://rashadkokash.com/posts/cross-site-scripting/