What a blunder. I think even the worst static code analyzers would have caught this. Looking at the code that was injected by an attacker it seems like they w

What a blunder. I think even the worst static code analyzers would have caught this. Looking at the code that was injected by an attacker it seems like they were trying to extract user sessions and exfiltrate it. https://programming.dev/post/532566 https://programming.dev/post/532566