https://www.somethingsblog.com/2024/10/17/full-stack-web-dev-security-part-2/