{"id":9759,"date":"2026-01-22T10:23:17","date_gmt":"2026-01-22T08:23:17","guid":{"rendered":"https:\/\/the-s-unit.nl\/?page_id=9759"},"modified":"2026-01-23T11:25:36","modified_gmt":"2026-01-23T09:25:36","slug":"tsu-05-insecure-consumption-of-integrations","status":"publish","type":"page","link":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/","title":{"rendered":"TSU-05: Insecure consumption of integrations"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"9759\" class=\"elementor elementor-9759\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-aaa94ad elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"aaa94ad\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0427a99\" data-id=\"0427a99\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-434b2fe elementor-widget elementor-widget-heading\" data-id=\"434b2fe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">The S-Unit Top 10<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ea8deb elementor-widget elementor-widget-image\" data-id=\"8ea8deb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-300x300.png\" class=\"attachment-medium size-medium wp-image-9446\" alt=\"TSU-05: Insecure Consumed Integrations\" srcset=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-300x300.png 300w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-1024x1024.png 1024w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-150x150.png 150w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-768x768.png 768w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-500x500.png 500w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-12x12.png 12w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-600x600.png 600w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5-100x100.png 100w, https:\/\/the-s-unit.nl\/wp-content\/uploads\/2025\/10\/The-S-unit-Top-10-Carousel-LinkedIn-Post-5.png 1080w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ceb434 elementor-widget elementor-widget-heading\" data-id=\"3ceb434\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">TSU-05: Insecure consumption of integrations<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9f2f3bf elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9f2f3bf\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0f4929c\" data-id=\"0f4929c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b7ea66a elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"b7ea66a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>TSU-05 concerns security issues that arise when microflows invoke external systems (APIs), such as via SOAP, REST, or OData. In Mendix, such external services are often used to process user data or data about users. This data is then transmitted either in the URL or in the body of the HTTP request.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a67f268 elementor-widget elementor-widget-spacer\" data-id=\"a67f268\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-07f0866 elementor-widget elementor-widget-heading\" data-id=\"07f0866\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Consequences of insecure user input<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-03657df elementor-widget elementor-widget-text-editor\" data-id=\"03657df\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"translation-block\">Vulnerabilities arise when <strong>user input is used in an insecure way<\/strong> to construct such a URL or request. This can lead to:<\/p><ul><li>Unauthorized access to backend API functionality<\/li><li>Manipulation or abuse of data through injection (for example via path traversal)<\/li><li class=\"translation-block\">Attacks in which the application itself accesses other systems, such as in Server-Side Request Forgery (SSRF)<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-d429f18 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"d429f18\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-bde79ee\" data-id=\"bde79ee\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-492a61b elementor-widget elementor-widget-heading\" data-id=\"492a61b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Best practices for secure API integrations in Mendix microflows<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-acdef05 elementor-widget elementor-widget-text-editor\" data-id=\"acdef05\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"translation-block\">When a microflow invokes an external web service, you must properly secure both the <strong>construction of the URL<\/strong> and the <strong>content of the request<\/strong>. Ensure that the involved microflow or the back-end system verifies whether the user is authorized to use the selected web service.<\/p><p>These best practices help with that:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ec33770 elementor-widget elementor-widget-heading\" data-id=\"ec33770\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">1. Secure construction of URLs and paths<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8f87ce2 elementor-widget elementor-widget-text-editor\" data-id=\"8f87ce2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li>Do not use user-modifiable attributes for the hostname of a URL (up to and including the first \/ in the path).<br \/>\u2192 Use fixed values, such as Mendix constants.<\/li><li>Avoid constructing backend URL paths using user input.<\/li><li>If a user-specific value must be included in the URL (e.g. a user ID):<ul><li>ensure that the user cannot modify this attribute themselves<\/li><li>do not generate the attribute based on user input<\/li><\/ul><\/li><li>Always use urlEncode() when attributes are part of a URL (path or query) to prevent path traversal and parameter injection<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-370d83f elementor-widget elementor-widget-heading\" data-id=\"370d83f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">2. Handling user-supplied URLs (e.g. webhooks)<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-82c660a elementor-widget elementor-widget-text-editor\" data-id=\"82c660a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li>If you must accept user-supplied URLs:<ul><li>ensure that the request does not contain passwords or other sensitive data<\/li><li>do not expose HTTP responses or error messages directly to the user<\/li><\/ul><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c72240a elementor-widget elementor-widget-heading\" data-id=\"c72240a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">3. Protection against Server-Side Request Forgery (SSRF)<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f493882 elementor-widget elementor-widget-text-editor\" data-id=\"f493882\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li>If you want to block traffic to internal services (e.g. via a whitelist or blacklist):<ul><li>take into account that the Mendix REST client automatically follows redirects<\/li><li>consider using a different HTTP client in which redirects are explicitly disabled<\/li><\/ul><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bfced78 elementor-widget elementor-widget-heading\" data-id=\"bfced78\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">4. Secure construction of request bodies<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0f40842 elementor-widget elementor-widget-text-editor\" data-id=\"0f40842\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li>Never construct JSON or XML requests using string concatenation<ul><li>REST \u2192 always use Export Mappings<\/li><li>SOAP \u2192 use Export Mappings or Simple Expressions<\/li><\/ul><\/li><li>For other request types (a=b&amp;c=d):<ul><li>ensure that all values are properly encoded (e.g. using urlendcode () ).<\/li><\/ul><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b0c3204 elementor-widget elementor-widget-heading\" data-id=\"b0c3204\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">5. Authentication and autorisation<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fdb4eca elementor-widget elementor-widget-text-editor\" data-id=\"fdb4eca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<ul><li>If the backend API supports it:<\/li><li style=\"list-style-type: none;\"><ul><li>use authentication on the backend API so that the backend itself can restrict access to only the permissions of the end user<\/li><\/ul><\/li><li>If that is not possible:<ul><li class=\"translation-block\">implement explicit authorization checks in the microflow\n(for example, to prevent Insecure Direct Object References)<\/li><\/ul><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b501365 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b501365\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-dbef240\" data-id=\"dbef240\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-9943f5e elementor-widget elementor-widget-heading\" data-id=\"9943f5e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Vulnerabilities within TSU-05<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a8545a2 elementor-widget elementor-widget-text-editor\" data-id=\"a8545a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The following vulnerabilities commonly occur within this category:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc9a17c premium-type-column elementor-widget elementor-widget-premium-icon-list\" data-id=\"fc9a17c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;rbadges_repeater&quot;:[]}\" data-widget_type=\"premium-icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t<ul class=\"premium-bullet-list-box\">\n\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-a242583\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw fas fa-times\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Manipulatie van API-calls via path traversal\">Manipulation of API calls via path traversal<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-e31d72a\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw fas fa-times\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Manipulatie via parameter-injectie\">Manipulation through parameter injection<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-4719d80\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw fas fa-times\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"XML-injectie\">XML injection<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-454fb3c\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw fas fa-times\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"JSON-injectie\">JSON injection<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-71cbb8e\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw fas fa-times\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Ongeautoriseerde toegang tot data via Insecure Direct Object Reference\">Unauthorized access to data via Insecure Direct Object Reference<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-1bff9b4\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw fas fa-times\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Onbedoeld uitlekken van gevoelige data via Server Side Request Forgery\">Unintended leakage of sensitive data via Server-Side Request Forgery<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<li class=\"premium-bullet-list-content elementor-repeater-item-edc4d37\">\n\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"premium-drawable-icon\"><i class=\"premium-svg-nodraw fas fa-times\" aria-hidden=\"true\"><\/i><\/div>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"premium-bullet-list-text-wrapper\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-text\" data-text=\"\">  <\/span>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"premium-bullet-list-desc\" data-text=\"Ongeautoriseerde toegang tot interne systemen via Server Side Request Forgery\">Unauthorized access to internal systems via Server-Side Request Forgery<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/li>\n\n\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-79558ed elementor-widget elementor-widget-heading\" data-id=\"79558ed\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Train your Mendix security skills<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4333459 elementor-widget elementor-widget-text-editor\" data-id=\"4333459\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Recognize and prevent vulnerabilities in Mendix at an early stage?\nExplore our updated Mendix security trainings based on The S-Unit Top 10.<br><\/p>\n<p><span lang=\"NL\"><o:p><\/o:p><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4b5658f elementor-widget elementor-widget-button\" data-id=\"4b5658f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"#\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Mendix trainings<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-067acb3 elementor-widget elementor-widget-spacer\" data-id=\"067acb3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6bd960f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6bd960f\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-57d706d\" data-id=\"57d706d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-d817b4f elementor-widget elementor-widget-heading\" data-id=\"d817b4f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Integrate The S-Unit Top 10 into your CI\/CD pipeline.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c0273f4 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c0273f4\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-31aa2aa\" data-id=\"31aa2aa\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-816ed96 elementor-widget elementor-widget-text-editor\" data-id=\"816ed96\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"translation-block\">Want to know how your Mendix application scores against The S-Unit Top 10?\nIn collaboration with Omnext, we have developed a Mendix-specific SAST solution that continuously and automatically scans for vulnerabilities. By integrating The S-Unit Top 10 into the CI\/CD pipeline, risks are identified early and made immediately visible. Learn more about our collaboration with Omnext and the Mendix-specific SAST module.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19ade86 elementor-widget elementor-widget-button\" data-id=\"19ade86\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/the-s-unit.nl\/en\/securitypartner-omnext\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Mendix specific SAST-module<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-64509a4 elementor-widget elementor-widget-spacer\" data-id=\"64509a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud [&hellip;]<\/p>\n","protected":false},"author":17,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-9759","page","type-page","status-publish","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"The S-Unit \u2013 Your Security Companion\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"TSU-05: Insecure consumption of integrations \u2013 The S-Unit\" \/>\n\t\t<meta property=\"og:description\" content=\"The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-01-22T08:23:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-01-23T09:25:36+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"TSU-05: Insecure consumption of integrations \u2013 The S-Unit\" \/>\n\t\t<meta name=\"twitter:description\" content=\"The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-05-insecure-consumption-of-integrations\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/the-s-unit.nl\\\/en\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-05-insecure-consumption-of-integrations\\\/#listItem\",\"name\":\"TSU-05: Insecure consumption of integrations\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-05-insecure-consumption-of-integrations\\\/#listItem\",\"position\":2,\"name\":\"TSU-05: Insecure consumption of integrations\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/#organization\",\"name\":\"The S-Unit\",\"description\":\"Your Security Companion\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/\",\"telephone\":\"+31302074177\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"\\\/\\\/the-s-unit.nl\\\/wp-content\\\/uploads\\\/2021\\\/04\\\/logo-simple.svg\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-05-insecure-consumption-of-integrations\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-05-insecure-consumption-of-integrations\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/the-s-unit\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-05-insecure-consumption-of-integrations\\\/#webpage\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-05-insecure-consumption-of-integrations\\\/\",\"name\":\"TSU-05: Insecure consumption of integrations \\u2013 The S-Unit\",\"description\":\"The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/tsu-05-insecure-consumption-of-integrations\\\/#breadcrumblist\"},\"datePublished\":\"2026-01-22T10:23:17+02:00\",\"dateModified\":\"2026-01-23T11:25:36+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/\",\"name\":\"The S-Unit\",\"description\":\"Your Security Companion\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/the-s-unit.nl\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"TSU-05: Insecure consumption of integrations \u2013 The S-Unit","description":"The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud","canonical_url":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/the-s-unit.nl\/en#listItem","position":1,"name":"Home","item":"https:\/\/the-s-unit.nl\/en","nextItem":{"@type":"ListItem","@id":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/#listItem","name":"TSU-05: Insecure consumption of integrations"}},{"@type":"ListItem","@id":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/#listItem","position":2,"name":"TSU-05: Insecure consumption of integrations","previousItem":{"@type":"ListItem","@id":"https:\/\/the-s-unit.nl\/en#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/the-s-unit.nl\/en\/#organization","name":"The S-Unit","description":"Your Security Companion","url":"https:\/\/the-s-unit.nl\/en\/","telephone":"+31302074177","logo":{"@type":"ImageObject","url":"\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg","@id":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/#organizationLogo"},"image":{"@id":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/#organizationLogo"},"sameAs":["https:\/\/www.linkedin.com\/company\/the-s-unit"]},{"@type":"WebPage","@id":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/#webpage","url":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/","name":"TSU-05: Insecure consumption of integrations \u2013 The S-Unit","description":"The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/the-s-unit.nl\/en\/#website"},"breadcrumb":{"@id":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/#breadcrumblist"},"datePublished":"2026-01-22T10:23:17+02:00","dateModified":"2026-01-23T11:25:36+02:00"},{"@type":"WebSite","@id":"https:\/\/the-s-unit.nl\/en\/#website","url":"https:\/\/the-s-unit.nl\/en\/","name":"The S-Unit","description":"Your Security Companion","inLanguage":"en-GB","publisher":{"@id":"https:\/\/the-s-unit.nl\/en\/#organization"}}]},"og:locale":"en_GB","og:site_name":"The S-Unit \u2013 Your Security Companion","og:type":"article","og:title":"TSU-05: Insecure consumption of integrations \u2013 The S-Unit","og:description":"The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud","og:url":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/","og:image":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg","og:image:secure_url":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg","article:published_time":"2026-01-22T08:23:17+00:00","article:modified_time":"2026-01-23T09:25:36+00:00","twitter:card":"summary_large_image","twitter:title":"TSU-05: Insecure consumption of integrations \u2013 The S-Unit","twitter:description":"The S-Unit Top 10 TSU-05: Insecure consumption of integrations TSU-05 gaat over beveiligingsproblemen die ontstaan wanneer microflows externe systemen (API\u2019s) aanroepen, zoals via SOAP, REST of OData. In Mendix worden zulke externe diensten vaak gebruikt om gegevens van of over gebruikers te verwerken. Die gegevens worden dan meegestuurd in de URL of in de inhoud","twitter:image":"https:\/\/the-s-unit.nl\/wp-content\/uploads\/2021\/04\/logo-simple.svg"},"aioseo_meta_data":{"post_id":"9759","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":{"faqs":[],"keyPoints":[],"titles":[],"descriptions":[],"socialPosts":{"email":[],"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-01-22 08:23:19","updated":"2026-01-23 09:30:15","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/the-s-unit.nl\/en\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tTSU-05: Insecure consumption of integrations\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/the-s-unit.nl\/en"},{"label":"TSU-05: Insecure consumption of integrations","link":"https:\/\/the-s-unit.nl\/en\/tsu-05-insecure-consumption-of-integrations\/"}],"_links":{"self":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/9759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/comments?post=9759"}],"version-history":[{"count":18,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/9759\/revisions"}],"predecessor-version":[{"id":10261,"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/pages\/9759\/revisions\/10261"}],"wp:attachment":[{"href":"https:\/\/the-s-unit.nl\/en\/wp-json\/wp\/v2\/media?parent=9759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}