Ambitious ITsec fanboy newbie. "Every aspect of the user's interaction with the application may be malicious and should be regarded as such unless proven otherwise."