Looking good… and while I know Injection Vulnerabilities stay there, because they are still common, I’m annoyed our industry keeps saying “just learn how to do it right, and never make a mistake” (I think the only fix is to require the use of “developer defined strings”).