3 ms·
This is another reason why OAuth should be on a separate subdomain. (First reason is XSS on facebook.com which can grant any permissions to any app.)
by homakov 12y ago
This is another reason why OAuth should be on a separate subdomain. (First reason is XSS on facebook.com which can grant any permissions to any app.)