https://justice-reaper.github.io/posts/API-Testing-Lab-2/
Exploiting server-side parameter pollution in a query string - Justice-Reaper