https://www.securitynewspaper.com/2015/09/02/paypal-xss-vulnerability-found-fixed-before-being-exploited/