https://nakedsecurity.sophos.com/2016/01/25/critial-xss-flaws-in-magento-leave-millions-of-ecommerce-sites-at-risk/