Xss
Notes on contentEditable and HTML injection
16 February 2016