https://unaaldia.hispasec.com/2003/06/cross-site-scripting-en-internet-explorer-a-traves-de-xml.html