Code AnalysisBeginner 60s

Trace: Mass Assignment

isAdmin=true in request body?

Starter code

const allowed=['name','email'];
const reqBody={name:'test',isAdmin:true};
const filtered=Object.keys(reqBody).filter(k=>allowed.includes(k));
console.log(filtered.includes('isAdmin')?'vulnerable':'safe')

cybersec analysis beginner

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle