https://www.lifars.com/2015/01/making-users-hack-themselves-reflected-cross-site-scripting-combines-social-and-technical-attack-vectors/