https://www.tornevalls.se/2007/10/xss-at-imvu-still-unprotected/