I noticed that the parameter accountId is not checked whether or not it is actually a legitimate ID thus I can do something like /a/NOTVALID/ and it would still render the dashboard page, but this leads to subsequent links to either misbehave or crash
I noticed that the parameter accountId is not checked whether or not it is actually a legitimate ID thus I can do something like /a/NOTVALID/ and it would still render the dashboard page, but this leads to subsequent links to either misbehave or crash