Bug Bounty IDOR edge case bypass: id=attacker_id → id=victim_id ❌403 Forbidden id=attacker_id → id[] = [ attacker_id , victim_id ] 200 OK✅Bypassed { "attacker_details": ... , "victim_details": ... }