https://ones.com/ja/blog/knowledge/security-testing-blind-spots/