working POC for Xss/Servlet!