https://cordless.io/securing-java-applications-best-practices-for-2025/