Stored XSS into onclick event with angle brackets and double quotes HTML encoooded and single quotes