https://unaaldia.hispasec.com/2014/06/cross-site-scripting-en-mediawiki.html