https://seguridadpy.info/2018/04/vulnerabilidad-de-cross-site-scripting-en-drupal-core/