Shameless plug: this is exactly why we built Kontra to educate developers without having to go through dull write ups like these ..

[1] https://application.security/free/owasp-top-10 [2] https://application.security/free/owasp-to-10-API