https://5dok.org/document/6zk8m48z-webtaint-dynamic-taint-tracking-java-based-web-applications.html