https://unaaldia.hispasec.com/2010/02/cross-site-scripting-en-ibm-websphere-portal-6.html