Verifone interview question

xss, sql injection, owasp best practices, design patterns