> not possibly ever accept user comments or submissions, or could not ever risk having users sending links to one another. Those all proved to be false Funny t

> not possibly ever accept user comments or submissions, or could not ever risk having users sending links to one another. Those all proved to be false Funny thing is that this part is most often the cause of a data breach when looking at majority of pentesting reports. One thing is to expose something to few ppl you know and another thing is a possibility to send things to millions of ppl that are constantly abused like Twitter or Youtube.