D
Engineering

Security

Engine WhatsApp has no authentication — all endpoints public. AES-256-CBC encryption secret hard-coded with static IV. Socket.IO CORS open. Security must be at network perimeter.