Can we also include into the next release of WAFEC what Ryan Barnett has outlined within http://lists.owasp.org/pipermail/owasp-topten/2013-February/000844.html too (if he has not done so already)? -- Regards, Christian Heinrich http://cmlh.id.au/contact