Looking for XSS vulnerabilities in GitHub because why not