https://www.somethingsblog.com/2024/10/18/full-stack-web-dev-security-part-3/