JavaScript, Secure Coding, Prototype, Hacking, Defensive Security.
the reduce function is called, attacker’s reduce function will work. In authz.js, just check the line 41: const authorizedRequests = requests.reduce((acc, request, index) => { As you can see, we use the reduce function for requests, but the attacker has changed it. Our code is vulnerable to these