Our application has an Insecure Direct Object Reference vulnerability, or IDOR. Basically there are object IDs displayed in the url. I would like to know what would be the most efficient approach to resolve this vulnerability. Our Frontend is built on Angular 16, and our backend in .NET Core.
I have thought of encrypting the object IDs using a ‘salt key’, then decrypt it back when necessary. At the same time, I would like to know what would be the best algorithm for this.