https://rosiebaek.site/posts/cross-site-scripting/