- **Trusting Content-Type headers**: Attackers set any Content-Type they want; validate actual content

not declared type

promptBeginner5 min to valuemarkdown
0 views
Mar 28, 2026

Loading actions...