https://deepquest.code511.com/blog/2017/06/simplerisk-20170416-001-cross-site-scripting/