3 ms·
tl;dr: it was an open redirect.
by 29athrowaway 3y ago
tl;dr: it was an open redirect.
- talkin 3y agoNo, it wasn’t. It’s not validating reused codes or tokens from an application owned by attacker.
- 29athrowaway 3y agoTrue, thanks for noticing. I re-read it more carefully