https://raghu.io/mitigating-xss-vulnerability/