Suggestion: Always set charset in response header
ngyikp opened this issue · comments
http://blog.portswigger.net/2016/11/json-hijacking-for-modern-web.html
Also contains other helpful hints too
Anyone want to create a PR for this?
shieldfy / API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API