https://www.junookyo.com/2013/01/danger-based-xss-cross-site-scripting.html