https://deepquest.code511.com/blog/2017/06/sitecore-7-1-7-2-cross-site-scripting/