.. . 36 e. ApplicationAccepts Special Character As User Input[6]. 37 f. ValidAccountCan Be BruteForced[7]............................... 37 g. Missing API Rate Limiting[8] ........, 37 h. Application Does Not Have A Strong Password Policy [9] 37 i. Cleartexttraffic is Set To True [11] 37