Jasper Yu says to YSITD
然後不會擋XSS