Lazy-Loading as a Security Measure

Introduction Recently, an external red team (security) discovered a unique vulnerability in an application I maintain. All other work on this project has stopped until we get it not just patched, but appropriately fixed. The initial patch was simply a means of plugging the hole. It is intended to be temporary and something we can get in place quickly. While thinking about the patch, I had an odd…