Web application penetration test of a micro app from a user’s perspective