1 post
Pangram's sign-up form validates an email by mailing it: a POST to /api/validate-email is followed by spam delivered to that address.