git-xss-locator/<IMG SRC=javascript:alert('XSS')>