Comment by anandpdoshi

Doesn't using HTTPS prevent such an injection?