OWASP Top for .NET developers part 8: Failure to Restrict URL Accesstroyhunt.com1 pointtroyhunt15 years ago