Say i did something like https://SomeSite.com/variableThing=**MyValue** instead of https://SomeSite.com/variableThing=**DefaultValue**
Can I be held accountable for any errors that the variable generates on the server end.
The servers are probably owned by my local organization, and I have not agreed to any statements the software my organization is using.
If you knew (or had reasons to suspect) that the server end implemented something like (whether intentionally, or by way of a bug/omission):
if variableThing == **MyValue** {
causeALotOfTrouble()
}
— then yes, you pretty much can be held accountable.
Otherwise highly unlikely. By default, it is reasonable to expect that servers handle/filter/sanitise user input properly no matter where the request comes from, so modifying a URL is merely seeking certain data from the server — which it is free to supply or deny.
For example, if MyValue is an SQL injection attempt, then yes. If it is trying to filter out the results by a certain criteria, then no.
