Thank you for your insightful comment. I am reading through the owasp web page you linked right now.