https://owncloud.org/security/advisories/reflected-xss-gallery-application/