Latest work
All work →Jun 2026
Mealie BOLA: Any Authenticated User Could Delete Any Recipe
A writeup of a broken object-level authorization issue I found in the Mealie self-hosted recipe app.
Apr 2026
Adventureland - Reimagining the Indiana Jones Area
A concept expansion of the Indiana Jones corner of Adventureland into a cohesive mini-land built around a coaster, dark ride, and interactive walkthrough.
Jan 2026
Discoveryland - A Jules Verne-Led Reimagining
A concept refresh that re-centers Discoveryland around Jules Verne, with cohesive storytelling and new attractions.