So I\'m working on a web application security for a client, one of vulnerabilities outlined was a GET request with user information in the URL.
GET https://ex