Search posts, tags, users, and pages
Learn how small errors in OAuth implementation can lead to significant security vulnerabilities like one-click account takeover in web applications
Omid Rezaei
@omidrezaei
Markdown supported · ⌘↵ to post
Makbeyound
Awesome
Omid Tabei
Great 💙💙💙
دەس خۆش
Indexe
Great article. I was wondering, why use window.open here? Can't you achieve the same behavior without it? Just curious if there’s a specific reason behind it.
we need the attacker domain in the referer header in the last step so because of that here I use window.open to achieve that
FrixRev
very good
Makbeyound
Awesome