CWE-565: Reliance on Cookies Without Validation and Integrity CheckingOpens in a new tab

Hi ronnyop​ sorry no one has got back to you yet. Here is a hint I dug up for you:

Focus closely on the exact lines where the application extracts the "applyDiscount" cookie's value and directly parses it into the discount variable. The core of this flaw occurs at the specific point where the untrusted data is accepted and processed without any server-side validation or integrity checks.