3 ms·
Exactly. Suppose you have a front end system that captures user input, and then the backend communicates with another system using the input data. If not proper
by gumballindie 3y ago
Exactly. Suppose you have a front end system that captures user input, and then the backend communicates with another system using the input data. If not properly escaped and is concatenated then it can lead to an injection attack just like regular sql.
- valenterry 3y agoI find the terminology strange. The exact same can happen with a standard REST api. In fact, it's even more likely since there is no type system to assist there. Would you then call it REST injections too?