I came to a security concern while doing $http.post requests that are received by the backend of my app