NINE HTTP EDGE CASES EVERY API DEVELOPER SHOULD UNDERSTAND

Summary from the TLDR newsletter

Most security vulnerabilities come from unnecessary custom code that reimplements what frameworks already do correctly.