Please see my wiki page at OWASP -- https://www.owasp.org/index.php/User:Jeff_Williams