The Security Flaw We Found While Building Something Else

We were doing fairly ordinary work: a preference center for an enterprise client, the kind of page where a customer manages whether they want to keep receiving email and SMS. It runs on Salesforce Mar