https://www.systemtek.co.uk/2019/03/drupal-core-cross-site-scripting/