Resource Injection. Allowing user input to control
resource identifiers may enable an attacker to access or
modify otherwise protected system resources.
Setting Manipulation. Allowing external control of system