[development] Must read - safe string theory for the web