https://www.securitynewspaper.com/2017/02/16/attacking-javascript-web-service-proxies-burp/