https://mranv.pages.dev/posts/java-secure-coding-practices/