3 ms·
TL;DR: An old Facebook auth system included access tokens in app iframe URLs, which were subsequently leaked through the referrer to app advertisers, analytics,
by Titanous 15y ago
TL;DR: An old Facebook auth system included access tokens in app iframe URLs, which were subsequently leaked through the referrer to app advertisers, analytics, etc.