/tags/injection/ Recent content in Injection on Napat's Inverse Blog Hugo en-us Wed, 24 Jun 2026 10:00:00 +0700 /2026-06-24-query-is-the-new-get-and-thats-a-problem/ Wed, 24 Jun 2026 10:00:00 +0700 /2026-06-24-query-is-the-new-get-and-thats-a-problem/ An application-security narrative review of RFC 10008 — the new HTTP QUERY method. Five paragraphs of Security Considerations for a method that normalizes SQL, JSONPath, and XSLT as request bodies. Here's what the RFC got right, what it under-specified, and why your CDN, WAF, and DLP pipeline are not ready.