https://coderprog.com/javascript-security/