Code reviewMediumcr-p085

Subject SecurityLevel Mid–Senior~18 minCommon in Security interviewsIndustries Software development

Question

Review this form-handling endpoint (cookie-based session auth).

What a strong answer looks like

Separate real bugs from style. Rank issues by severity, point at the root cause rather than the symptom, and suggest a concrete fix — specific and kind.

Learn the concepts

Talk through your review

Code to reviewpython

1@app.post('/transfer')2def transfer():3    to = request.form['to']4    amount = request.form['amount']5    do_transfer(current_user, to, amount)

Run or narrate your approach, then ask the coach.