https://raz0r.name/vulnerabilities/hash-length-extension-in-htmlpurifier/