https://protectonce.com/appsec-academy-for-developer/what-are-the-owasp-top-10-and-how-to-mitigate-these-risks/