🐍 Custom Django middleware request response — what devs get wrong

An attacker injects a malicious payload through a seemingly benign API endpoint, bypassing validation...