"But my code can't be insecure, it runs over https"
I shouldn't read stuff like that while I'm eating (sweet & sour pork plus pak-choi fu yung and rice).
Real lethargic today. I need to assign myself more decent-sized lumps of code to get my teeth into. And I need a holiday.