Use [Link] or [Link] and [Link] for guidance.
We used Detectify to stay up to date with the current OWASP Top 10