https://www.pivotpointsecurity.com/legacy-web-application-code-secure-it-or-flush-it/