Pregunta de entrevista de Stuart

How would you protect a REST API against potential SQL Injections?