Data Exposure Security Risks

Overview

Don't accidentaly expose user data. This is especially common when handling user

permissions. Once a user is authenticated, a break down in permission checking

can lead to the wrong person seeing someone else's data.

In our line of work, this can often occur when using the ORM with inadequate

scoping for the currently authenticated user. Data exposure can also occur when

sending email, if the recipients are not carefully controlled for.