https://deepquest.code511.com/blog/2017/04/flyspray-1-0-rc4-cross-site-scripting/