- **Trusting Content-Type headers**: Attackers set any Content-Type they want; validate actual content

not declared type

promptBeginner5 min to valuemarkdown
0 views
Mar 29, 2026

Loading actions...