STEPS
- create appsscript project
- have a spreadsheet bound to it
- add Google Sheets API as a service in the appsscript editor
- authorize your script
- save and run
setup a postgres DB with fake users
then run npm install then npm start
go to / path and try an attack using the search user field