https://pravin.dev/posts/do-not-trust-others-code/