▶ Videos →

📰 Dev.to · Pon

2 articles · Updated every 3 hours · View all reads

All Articles 174,206 Blog Posts 163,912 Tech Tutorials 46,417 Research Papers 34,131 News 21,985 ⚡ AI Lessons

This endpoint has auth. The tests are green. It still lets a user hand themselves admin.

Dev.to · Pon 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

This endpoint has auth. The tests are green. It still lets a user hand themselves admin.

Here's a pattern I keep running into in AI-scaffolded update endpoints: the code looks completely...

My public view leaked every user's email. The AI called it "partial user data."

Dev.to · Pon 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

My public view leaked every user's email. The AI called it "partial user data."

Every email address in my users table was readable with just the anon key. The app worked fine, tests...