http://blog.mozilla.org/security/2014/03/25/using-fuzzdb-for-testing-website-security/