https://jonathansblog.co.uk/defending-against-injection-attacks-through-context-sensitive-string-evaluation