---
title: "#oauth-security articles | Hashnode"
description: "Explore 3 articles tagged #oauth-security on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/oauth-security"
---

Tag

# #oauth-security

3 posts · 0 followers

[Abhinav](https://hashnode.com/@abiinv) · [Jul 8](https://hashnode.com/posts/lab-02-forced-oauth-profile-linking/6a4e3b447d82fee7b21d8de9)

### [LAB #02 Forced OAuth profile linking](https://log.page0.dev/lab-02-forced-oauth-profile-linking?utm_source=hashnode&utm_medium=feed)

Understanding and exploiting an insecure OAuth account-linking implementation.

3 min read · [log.page0.dev](https://log.page0.dev/lab-02-forced-oauth-profile-linking?utm_source=hashnode&utm_medium=feed)

[Voorivex](https://hashnode.com/@Voorivex) · [May 6, 2025](https://hashnode.com/posts/leaking-oauth-token-via-referrer-leakage/681a735037f3a5e5dc98d8eb)

### [Stealing oAuth Token via Referrer Policy Override](https://blog.voorivex.team/leaking-oauth-token-via-referrer-leakage?utm_source=hashnode&utm_medium=feed)

Explore how referrer leakage can expose OAuth tokens in browser implementations and learn methodologies to protect against token theft

4 min read · [blog.voorivex.team](https://blog.voorivex.team/leaking-oauth-token-via-referrer-leakage?utm_source=hashnode&utm_medium=feed)

[3](https://hashnode.com/posts/leaking-oauth-token-via-referrer-leakage/681a735037f3a5e5dc98d8eb)

[Amirmohammad Safari](https://hashnode.com/@AmirSafari) · [Feb 15, 2025](https://hashnode.com/posts/css-data-exfiltration-to-steal-oauth-token/67b0ceb5e75041ff9906e0c3)

### [CSS Data Exfiltration to Steal OAuth Token](https://blog.voorivex.team/css-data-exfiltration-to-steal-oauth-token?utm_source=hashnode&utm_medium=feed)

Use CSS injection to bypass CSP, exfiltrate OAuth tokens through unique chaining techniques. Discover vulnerability and exploit details

7 min read · [blog.voorivex.team](https://blog.voorivex.team/css-data-exfiltration-to-steal-oauth-token?utm_source=hashnode&utm_medium=feed)

[1](https://hashnode.com/posts/css-data-exfiltration-to-steal-oauth-token/67b0ceb5e75041ff9906e0c3)