Did you notice something that we missed with whitelisting in the previous video? Have a look at the code again.. what are we missing? Simple issues like these can appear when writing our backend that makes our API vulnerable. This is why it is always a good idea to code review, work in teams and test your code! Have a think, and we will show you the issue and how to solve it in the next video!