https://sansec.io/research/magento-2-template-attacks