https://www.javacodegeeks.com/2015/05/9-security-mistakes-every-java-developer-must-avoid.html