https://jetamooz.com/ajax-security-in-security-testing/