https://unaaldia.hispasec.com/2005/03/cross-site-scripting-en-oracle-reports-server.html