Authorized Web Audit: When the App Has No Backend, You Audit Its Assumptions

Field notes from an authorized audit of a small web store. The headline: there was no backend to...