[msarchet]

I find it interesting that they assume that you treat passwords as plaintext in a security document :/

[wheresvic1]

That was just an example, you could just as well change it to an injection on a different resource/field!