I'd never heard of that acronym before myself. Insecure = no access control/authorization Direct Object reference = URL https://cheatsheetseries.owasp.org/ch

I'd never heard of that acronym before myself. Insecure = no access control/authorization Direct Object reference = URL https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet.html https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Dire... "Direct Object Reference is fundamentally a Access Control problem."