Bypassing Firefox's HTML Sanitizer API
portswigger.net