Georgia's voter portal gets a crash course in client versus backend input validation

A newly launched Georgia voter-registration cancellation website had a client-side validation flaw that allowed a researcher to remove a required field and submit a cancellation using only publicly available personal details, and for about an hour the site also auto-filled driver's license or SSN-last-four values when queried; state officials say backend/manual processing prevented fraudulent cancellations, the autofill was disabled, and an error message was added.