some attempt at xss with venus