Claude found a security hole in my app and then refused to fix it
Honestly this is getting ridiculous Last week Opus 5.5 flagged an issue in my own SaaS during a normal refactor. One of our invoice endpoints lets any logged in user pull another company's invoices if they change the ID in the URL. Classic IDOR, my fault, fine. I asked it to fix it and the whole co…
Read the full story at r/ChatGPTCoding ↗
Timeline · 1 report
- 2026-10-17 08:32 · r/ChatGPTCoding
Claude found a security hole in my app and then refused to fix it