https://data-security.business/securing-apis-against-injection-and-exploits/