https://mamchenkov.net/wordpress/2011/02/28/lastpass-xss-vulnerability-found-is-it-a-big-deal/