4 ms·OWASP Top for .NET developers part 8: Failure to Restrict URL Access1 points by troyhunt 15y ago