Cross-Site Scripting (XSS) in APIs & Mitigation
Exploiting BOLA and Injection Vulnerabilities in APIs