he Proxy That Snitched on Itself (opens in new tab)

How a single echoed header turned a default merchant account into admin on an internal Apache Airflow — and handed over the keys to…