https://deepquest.code511.com/blog/2017/06/vaadin-7-7-6-cross-site-scripting/