1723 subject enumeration 2
Alternative to !1480 (closed). Differences:
- The ID is not included in the URL, so no information is leaked.
- There is no risk of forgetting to check the slug because it is the only way to identify the subject.
- The slug needs to be unique, so I used UUIDs instead of 6-character random strings.