https://www.pivotpointsecurity.com/autocomplete-and-application-security-testing/