https://jonathansblog.co.uk/securing-web-application-code-by-static-analysis-and-runtime-protection