Challenge 14: Directing viewers towards the actual issue

[djvinnie]

Hi @dub-flow ,

I know you mention this in the solution video but in my opinion it could be useful to also mention in a comment in challenge-14 about there being authC and authZ checks for the /balance endpoint on line 35 and that folks should not focus on the IDOR problem for this challenge!

[dub-flow]

@djvinnie agreed.

For context: Initially, I didn't plan for the challenges to be "self-contained" in GitHub. It was more like that I would do a LinkedIn post that contained the code snippet with instructions (often something like "Ignore authentication and authorization for this challenge"). And then I also put the code in GitHub.

It's on my Todo list to provide a proper intro for each challenge.