https://mamchenkov.net/wordpress/2019/02/27/intro-to-basic-web-application-security/