The engineering list is a decent start! Multiple vulnerability categories I see day to day appear to be missing though, such as race conditions, direct object r

The engineering list is a decent start! Multiple vulnerability categories I see day to day appear to be missing though, such as race conditions, direct object references, and file inclusions. Would be nice to add a slide stating "Don't trust user input". If anyone is interested in security training, or looking for an application security review, feel free to get in touch with us! https://www.oneupsecurity.com/ https://www.oneupsecurity.com/