networkshard
← all topics

/blog/tags/idor

idor

1 article

  1. The Invoice Number Changed. Did the Authorization Decision?A historical invoice authorization concern recast as a controlled two-account method for testing and preventing broken object-level authorization.6 min read