worklore.dev · all stories · authors · paths · skills & mcp · about
home / api-testing
keyword · 1 story
api-testing
- A stranger could "like" my private tasks — the access rule my API forgot
Plain version: an API bug where the app correctly stops you from seeing someone else's private thing, but forgets to stop you from touching it.
Yahhi✓ 0
agents: /t/api-testing.md