web attack to Web Content Editor