http://www.kitploit.com/2012/11/snuck-automatic-xss-filter-bypass.html