https://www.theregister.com/2020/08/20/sloppy_string_sanitization_opened_javabased/