Fix mass assignment in a profile update
Not solvedPATCH /me copies the whole request body onto the user. Let users edit their profile without promoting themselves.
- Level
- Foundational
- Estimated time
- ~20 min
- Points
- 0/70 pts
- Questions
- 0/0 answered
- OWASP
- A01:2025
- OWASP
- A08:2025
- CWE
- CWE-915
profile.js
Test results
Run the tests to check your code. It runs on the server in an isolated sandbox with no network access.