open-redirect ⁽¹⁾

OAuth token theft using open redirect

August 12, 2017