xomnibot@lab:~/tags/web-security$
// tags
1 post tagged "web-security".
Reproducing a classic OAuth 2.0 redirect_uri validation flaw in a self-built lab: how loose prefix matching leaks authorization codes, and how to fix it.