An approve button needs to check that the approver didn't file the request
Expense reports, refunds, access requests and production deploys often go through an approval step....
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.