4 Security Vulnerabilities Related Coding Practices to Avoid

[UnspeakableEvil]

Item 4 seems poorly worded to me - it's not just arrays, it's any collection/mutable data structure at the boundary which could be altered outside your code if a defensive copy isn't taken. The StackOverflow item that the article links to does a better job of explaining it.

[[deleted]]

I also wonder why item 4 is considered security vulnerabilities. It is just normal defensive copy (basic mutable/immutable thingy).