Source code review and penetration test of the REST API for a notification service