https://dfarq.homeip.net/what-cross-site-scripting-is-and-how-to-recognize-it/