3 ms·
If you call it an Insecure Direct Object Reference (IDOR) it still seems mystical
by arealaccount 5y ago
If you call it an Insecure Direct Object Reference (IDOR) it still seems mystical
- richardbarosky 5y agoI'd never heard of that acronym before myself. Insecure = no access control/authorization Direct Object reference = URL https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet.html https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Dire... "Direct Object Reference is fundamentally a Access Control problem."