the product manipulates.
Resource injection occurs when the user is able to specify an identifier for a
resource that violates the intended policy.
Note: this might need to give more specific examples for KDM such as types of