SecurityInnovation/TMContentReview — Issue #63: Do Not Make Security Decisions Based on Client-Accessible Parameters
Author: SergeTruth
Created: 2011-11-07 22:24:46+00:00
State: open

The example is a bit contrived. I would use the cookie example as it happens more often.