A local, entirely fictional teaching demo of Broken Object Property Level Authorization (OWASP API3:2023) — a secure expense-claim API beside an intentionally vulnerable contrast service.
python docker security owasp authorization application-security mass-assignment appsec api-security fastapi security-education excessive-data-exposure bopla
-
Updated
Aug 16, 2026 - Python