http://www.wisec.it/sectou.php?id=4e6e1cae16dc7 https://www.aspectsecurity.com/uploads/downloads/2011/09/ExpressionLanguageInjection.pdf