XSS vulnerability

This implementation is vulnerable to XSS described here https://blog.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers/

Reproduction with the following URL `/?url=https://jumpy-floor.surge.sh/test.yaml`