Dice25: Writeup for web/cookie-recipes-v3

Bypass ExpressJS length check using number[]=value; qs parses array, coerced to pass validation.

April 12, 2025 · 9 min · hxuu