2 ms·

See. They usually do randItem(suspectList) but they didn’t know suspectList was untrusted user input that only contained a single element