If they get past Security Provider they can do whatever your API allows them to do.
If you don’t sanitize sql queries they can DROP a database.
If they get past Security Provider they can do whatever your API allows them to do.
If you don’t sanitize sql queries they can DROP a database.