https://marcoramilli.com/2010/09/22/twitter-xss-vulnerability/