Checkout

Objective Complete a checkout the business rules should forbid (total ≤ $0).

💡 Show hint

Price and quantity are sent by your browser. Try a negative quantity (or price) so the total is zero or less, then Pay.

FlawThe server trusts client-supplied price/quantity and never validates them. FixPrice server-side; reject non-positive quantities; enforce one-time coupons.