my funniest was a wrong param in a template generator which turned off escaping parameter values provided indirectly by the users. good that it was discovered d

my funniest was a wrong param in a template generator which turned off escaping parameter values provided indirectly by the users. good that it was discovered during the yearly pen testing analysis because it lead to shell execution in the cloud environment.