Insecure direct object reference (IDOR) is a security vulnerability where attackers can manipulate URLs or form fields to access unauthorized data or functionality. Though it can pose serious security risks, mitigating it is pretty straight forward.
Don't trust, verify.
Cross-site scripting (XSS) is a type of injection vulnerability typically found in web applications. When proper precautions aren't taken, it can lead to data theft, website defacement, session hijacking, and more.
LFI is a common web app vulnerability, but mitigating it is pretty straight forward with a combination of secure coding practices and proper input validation.
