Guida pratica al Broken Access Control OWASP A01:2025: privilege escalation, IDOR e BOLA, force browsing, metodi HTTP, header bypass e test con Burp Suite.