https://vulert.com/blog/nextjs-best-practices-secure-your-web-app/