https://toxigon.com/securing-javascript-code-from-injection-attacks