Is it possible to create a link that can result in a potential XSS vulnerability?