Mass Assignment

Challenge Question

This API's registration endpoint accepts a JSON body and builds the new user record straight from whatever fields you send it, with no filtering and no whitelist. See what happens if you include a field the signup form was never designed to expose.