For injection attacks (SQLi, SSTI, SSRF, XXE, command injection, PHP type juggling, PHP file inclusion), see server-side.md. For deserialization attacks (Java, Pickle) and race conditions, see ...

Never use a font in <text>, an icon from a library, an emoji or a bitmap. Concept: one sentence, from the subject. A symbol only with a reason; otherwise a wordmark with custom details. Exploration: ...