Example: User Misbehavior
Site assumes that forms are submitted in order.
- Attacker invokes random URLs.
Site uses Javascript to validate input.
- Attacker omits the Javascript, and sends junk.
Site tracks state via cookies.
- Attacker modifies the cookies before submitting them.