IDOR Detector

Write findIdor(routes) — routes is an array of { path, hasOwnershipCheck, method }. A route is an IDOR risk when its path contains ":id" (or "/:id/") and hasOwnershipCheck is false. Return the risky paths sorted alphabetically. GET routes count too — reads leak data.

Difficulty: intermediate