https://protectonce.com/appsec-academy-for-developer/excessive-data-exposure/