fixed OWASP example with more details