https://www.systemtek.co.uk/2019/03/prometheus-stored-dom-based-cross-site-scripting-vulnerability-cve-2019-3826/