https://osandamalith.com/2016/07/27/bypassing-ie-and-edge-xss-filters-with-double-encoding/