Applying OWASP 2017: Mitigating Injection