Your worst security bug probably looks like a normal request (opens in new tab)

A while back I was looking at a small team task tool. You know the type. Each team has projects, projects have tasks, and people get…