u Irfan A. Chaudhry, et al., Web Application Security Assessment
(Microsoft Press, 2003).
u Simson Garfinkel, Gene Spafford, and Alan Schwartz, Chapter 16,
“Secure Programming Techniques,” and Chapter 23, “Protecting