https://osandamalith.com/2014/04/26/hotgloo-xss-filter-bypassed/