https://techspiro4.blogspot.com/2023/04/a-developer-exploited-flaw-in-api-to.html