The dangers of No-Code

A no-code BJJ tracker built on Base44 enforced all of its authorization in the browser. Here is the chain of six issues that let anyone with a browser read every user’s data, deface the site, and take over accounts.