Djordje Cenic 2c45021cb3 Add security knowledge: validate unauthenticated endpoint responses ... New remedial article for spotting when AL calls an endpoint that does not authenticate itself to the client (bare HttpClient.Get, blank SOAP SecretText, post-DisableHttpsCheck HTTP) and requires the response to be size-, schema-, and request/response-integrity-validated before it is trusted. Includes the BC-specific false-positive clarifications (platform buffers the full body, so an in-AL size check after buffering is correct; no DNS-rebinding/bounded-read demand; HTTPS not always enforceable) plus good/bad AL samples. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>		2026-09-15 13:16:53 +02:00
..
knowledge	Add security knowledge: validate unauthenticated endpoint responses	2026-09-15 13:16:53 +02:00
skills	style-review: calibrate variable-declaration order (AA0021) to info (#109)	2026-07-17 14:17:32 +02:00