When the set of acceptable objects, such as filenames or URLs, is limited or known,
create a mapping from a set of fixed input values (such as numeric IDs) to the actual
filenames or URLs, and reject all other inputs.
CWE-79 : Improper