https://truxgoservers.com/blog/what-should-we-know-about-security-with-javascript/