function setHomePage() {
    $.ajax({
        type: 'POST',
        url: baseurl + '/userSettings/setHomePage',
        data: {
            path: window.location.pathname
        },
        success:function (data, textStatus) {
            showMessage('success', 'Homepage set.');
            $('#setHomePage').addClass('orange');
        },
    });
}
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.