3 ms·Header spoofing via a hidden parameter in Facebook Batch GraphQL APIs1 points by simonpure 4y ago