https://mamchenkov.net/wordpress/2017/05/29/web-developer-security-checklist/