https://toxigon.com/understanding-common-javascript-vulnerabilities