Learn · 1/2

Often missed

Weak session cookies, actions without CSRF protection, unauthorized access via object IDs — AI skeletons often forget these.