Thank you for this link. As someone just getting started in web app security this was eye-opening.