Find mass assignment in strongly-typed frameworks
Binders that map the whole request to a model let attackers set fields the form never exposed, like role or price.
Binders that map the whole request to a model let attackers set fields the form never exposed, like role or price.