https://hackersec.com/o-que-e-cross-site-scripting-xss/