Source: https://owasp.org/www-pdf-archive/Secure_Web_App_Server_McRee_OWASP.pdf