Flagged up a #bug on this today – different project – still looks like most developers don’t even look at #OWASP -… twitter.com/i/web/status/1012437091156922368