https://jericho.blog/2008/07/25/brief-analysis-of-analyzing-websites-for-user-visible-security-design-flaws/