MORE FROM THIS AUTHOR
Insecure deserialization in web applications
Debunking the top 5 myths about DAST
The Helix Files: Choose Your Own Adventure
HTTP security headers: An easy way to harden your web applications
The OWASP API Security Top 10 demystified
What’s the big deal with post-quantum cryptography?
How the DORA framework mandates application security testing (and many other things)
A voyage of discovery: Talking APIs with Frank Catucci and Dan Murphy
XSS filter evasion: Why filtering doesn’t stop cross-site scripting
Polyfill supply chain attack: What to do when your CDN goes evil
