Root Inc. interview question

Q: What are security considerations to make when designing a web application?