https://www.junookyo.com/2012/09/xss-attacker-bypass-filter-with.html