Term Kind Topic What it is
Mass Assignment Auto-Binding, Over-Posting concept Secure API Design A vulnerability where a request body is bound directly to an internal object, allowing a caller to set fields the API never intended to expose.
Request-Scoped Identity Principal-Bound Response, Per-Request Ownership Check pattern Secure API Design Binding every piece of shared mutable state a response is assembled from to the principal who asked for it, so that a bug in pooling or caching produces an error rather than another customer's data.
Secure API Design practice Secure API Design Building an interface where the safe path is the default and the unsafe one requires deliberate effort.