https://www.canonrumors.com/rebel-xss-in-stores-4/