pinkLagoon

Add a section for checking if the server responds with sensitive information.

7

**What would you like added?** We sometimes see that developers might just serialize an entire object into JSON and returns it in a API response. Sometimes this object contains sensitive...

Add a section for checking if the web application properly hashes passwords before storing them in the backend.

10

**What would you like added?** Sometimes web applications do not hash their passwords before storing them. It **should** be rare these days but I've come across this a few times...