https://www.cojocarudavid.me/blog/how-to-secure-your-apis-against-common-attacks