https://www.junookyo.com/2013/07/tutorial-dom-based-xss-vulnerability.html