Whenever you're ready, walk me through how you'd approach this.
What are common vulnerabilities found in web applications, and how would you identify them by reviewing request handling code, string construction, and input parsing logic?
