3 ms·
Agree. The backend tells you what is allowed and you override it and it shows that it is allowed now :) The real issue would have been if the user did these ac
by geoelkh 6y ago
Agree. The backend tells you what is allowed and you override it and it shows that it is allowed now :)
The real issue would have been if the user did these actions and there was no backend validations on them. The video does not cover this.
- ludjer 6y agoYip I am struggling to see where the security risk is. If the policies are still applied server side(I am assuming this is the case since they did not demo server side vulnerabilities). Then all you are doing is getting to a part of the UI that has no functionality. The same can be done with many other UI's by editing the local configuration.