https://www.junookyo.com/2011/12/shockwavecom-cross-site-scripting.html