now a days people will learn every other javascript framework but not basic web security.
this is api-response from one of biggest e-commerce store who is selling merch of few big bollywood celebs, cricketers and youtubers. and i can query every user response by just changing query params. and every fuckin api on this website is vulnerable to insecure direct object reference.
it mean i can place order on behalf of anyone whose user id i know
@Olufela_Jr I ain't know you but i got the tweet notification. You gat this, you're who you think you are. So go again. Will be waiting to congratulate you.