Comment by saberdancer

Am I understanding this correctly. You are vulnerable if you log user input, for example especially if it is on a public facing API.