Input validation is another battlefield. APIs take in data—sometimes as JSON, sometimes as XML, sometimes as query parameters—and that data must be handled carefully. If your API accepts user input ...