Patchstack Weekly – Using OWASP ZAP to Spot User Input
“Never trust user input” – this is security’s golden rule. So it’s a great thing OWASP ZAP has tools that can show you how much data in a web app is controlled by the browser – and therefore also by the user. Robert explains how to use those tools to uncover the hidden risk.