https://marcoramilli.com/2010/10/03/mastercard-and-visa-sites-bitten-by-xss-bugs/