OWASP Top 10 - Injection What is an Injection? Injection vulnerabilities happen anytime untrusted data is used within a system. Commonly this occurs when a user passes some information to a system and the system starts to interpret the input without validation or sanitization. Examples of Injections …

CORS TL;DR Don’t do Access-Control-Allow-Origin: *❗❗ CORS What is it? Cross-Origin Resource Sharing (CORS) is a way for resources to be shared between domains. A domain is considered to be different when the domain, port, or protocol are not the same as the requesting domain. For example, a …