https://unaaldia.hispasec.com/2018/04/cross-site-scripting-en-ibm-websphere-portal.html