Source: https://clusif.fr/wp-content/uploads/2015/09/clusif-2011-defense-en-profondeur-des-applications-web.pdf