https://owncloud.org/security/advisories/xss-vulnerability-user_webdavauth/