guestbook app with intentional XSS vulnerabilities, for authorized web pentesting practice only, with simple stored and reflected XSS