Skip to content

Challenge 14: Directing viewers towards the actual issue #5

Open

Description

@djvinnie

Hi @dub-flow ,

I know you mention this in the solution video but in my opinion it could be useful to also mention in a comment in challenge-14 about there being authC and authZ checks for the /balance endpoint on line 35 and that folks should not focus on the IDOR problem for this challenge!

Activity

  1. dub-flow commented on Dec 1, 2025

    @dub-flow
    Owner

    @djvinnie agreed.

    For context: Initially, I didn't plan for the challenges to be "self-contained" in GitHub. It was more like that I would do a LinkedIn post that contained the code snippet with instructions (often something like "Ignore authentication and authorization for this challenge"). And then I also put the code in GitHub.

    It's on my Todo list to provide a proper intro for each challenge.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions