Simple Authorization via PHP Classes
-
Updated
Feb 13, 2017 - PHP
#
mass-assignment
Here are 11 public repositories matching this topic...
Walkthrough demonstrating real-world exploitation and mitigation of critical API security flaws (Mass Assignment to Logging & Monitoring).
-
Updated
Jul 13, 2026
Expected attribute values for Pundit strong parameters — declare allowed per-attribute scalar values in your policies, alongside expected_attributes.
-
Updated
Aug 12, 2026 - Ruby
Spring boot application developed to learn how to use the framework and understand how vulnerabilities are manifested in the application and how to prevent them.
white-box-testing code-review mass-assignment secure-coding server-side-request-forgery crosssitescripting
-
Updated
Sep 8, 2023 - Java
DEMO for ASP.NET Worst Practices sessions
-
Updated
Mar 19, 2017 - C#
A simple task list app, with completion mark, user input & form validation. Basic routing and controllers, Blade templating, database interactions with Eloquent ORM, CRUD operations, form validation, session handling
docker pagination migrations models routing blade mass-assignment csrf-protection subviews reusability model-factory seeders route-model-binding tailwind-css alpine-js form-old-values sessions-errors-flash-messages validating-data
-
Updated
Jul 24, 2024 - PHP
Static-analysis CLI (GitHub Action) that flags client-controlled tier/plan/role values reaching an entitlement decision without Stripe-webhook-verified gating.
cli security typescript stripe static-analysis ast owasp saas authorization mass-assignment idor github-actions authorization-bypass broken-access-control
-
Updated
Aug 8, 2026 - TypeScript
VAPT Master Checklist for web application vulnerabilities, including detailed checklists and techniques for various attack vectors.
-
Updated
Jun 10, 2026
A local, entirely fictional teaching demo of Broken Object Property Level Authorization (OWASP API3:2023) — a secure expense-claim API beside an intentionally vulnerable contrast service.
python docker security owasp authorization application-security mass-assignment appsec api-security fastapi security-education excessive-data-exposure bopla
-
Updated
Aug 16, 2026 - Python
Zero-day technique: persistent SSRF via mass assignment in AI pipeline configuration
security owasp penetration-testing mass-assignment appsec ssrf zero-day vulnerability-research ai-security bopla
-
Updated
Aug 8, 2026 - Python
Mass-assignment probe — re-sends a captured create with extra fields and emits a PoC curl per stuck field.
-
Updated
Apr 21, 2026 - Python
Improve this page
Add a description, image, and links to the mass-assignment topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the mass-assignment topic, visit your repo's landing page and select "manage topics."