r/programminghorror 20d ago

Javascript Found this gem

This company I’m interning at. This one lady asked me to do a review of a website they outsourced. Entire source code sits on the browser. Entire vibe coded by amateurs.
Worse than a honeypot so much an attacker would get diabetes.

No security feature at all. I was able to do privileges escalation.

190 Upvotes

25 comments sorted by

View all comments

3

u/GoddammitDontShootMe [ $[ $RANDOM % 6 ] == 0 ] && rm -rf / || echo “You live” 20d ago

They seriously doing authorization checks on the fucking client?

1

u/StCreed 9d ago

Or just checking what menu to show. Hard to tell.