Questions to be answered:
1. Someone on your project team wants to accept serialized objects from an untrusted source. You know this is a bad idea. How do you explain the risk effectively to your teammate? Write down your answer. Be persuasive and clear.
The OWASP Top Ten is a standard: Yes or no.
Name three of the OWASP Top Ten that we already covered in this book before Chapter 5.
Does the XXE vulnerability apply to JSON? Does it apply to YAML? If so, why? If not, why not?
Name an example of a race condition (it does not need to be computer related).
Why do we roll back incomplete transactions? Why does that matter? Give an example of when not rolling back an incomplete transaction would be problematic.