why didnt the black box of bullshit company detect this? for a group that touts every inane 'discovery' with hyperbolic bullshit, they really fall short on delivering anything of actual value, just rehashed bullshit.
msarda_23 11 hours ago||
[flagged]
marincoco1 10 hours ago||
[flagged]
frank00001 11 hours ago||
[flagged]
marwaneet 13 hours ago|
Another classic OAuth implementation failure. Mismanaging the state parameter or leaking tokens via referer headers in redirects is Security 101. Wild to see this in a production environment of this scale.
brabel 11 hours ago||
The post seems to be talking about a html injection via a postMessage call where the receiver didn’t check who sent the message, which is a well known vulnerability entry point. Did I miss where OAuth had anything to do with this??
steve1977 13 hours ago||
Production scale is not production grade I guess...