Code injections are a favorite way for malicious actors to commandeer an API and have it do all manner of things that you or your client won’t want them to. The most common code injections include SQL, XML, and RegEx, and API, and they send commands to applications to do things like share sensitive user data, passwords, and other authentication information, and plant malware and spyware on devices.

Read full article on HackRead