http://go.theregister.com/feed/www.theregister.co.uk/2017/05/12/googles_php_api_client_has_xss_vulnerability/