{"success": false, "error": "No query headers provided", "usage": {"headers": {"X-User-Filter": "JSON query for users collection", "X-Product-Query": "JSON query for products collection", "X-Auth-Token": "Authentication token (vulnerable to injection)", "X-API-Filter": "Generic filter with collection and query"}}, "response_metadata": {"owasp": "A03:2021 - Injection", "cwe": "CWE-943", "type": "NoSQL Injection via HTTP Headers"}}