7. CWE-22 : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
8. CWE-829 : Inclusion of Functionality from Untrusted Control Sphere
MIT-6 Understand all the potential areas where untrusted inputs can enter your software: parameters or
arguments, cookies, anything read from the network, environment variables, reverse DNS lookups, query