After half year in production finally some malicious user hit my code with injection that crumbled the hi throughput system. This was surprising for 2 reasons:

After half year in production finally some malicious user hit my code with injection that crumbled the hi throughput system. This was surprising for 2 reasons: 1. That nobody came up with the injection for so long. 2. That the injection was pretty silly and non obvious (kinda explains first point lol). Not your typical sql/js/css etc. it had something to do with localization and the cumbersome way it was implemented in some java libraries