Demonstration and post-mortem of a cross-site scripting vulnerability in C-CDA display - View it on GitHub