3 ms·

Holy insecure demo batman https://yoauth.herokuapp.com/authorize?redirect_to=http%3A%2F%2Fyoauth.herokuapp.com%2Ftest.html&username='><MARQUEE>XSS</MARQUEE><!-

Holy insecure demo batman https://yoauth.herokuapp.com/authorize?redirect_to=http%3A%2F%2Fyoauth.herokuapp.com%2Ftest.html&username='><MARQUEE>XSS</MARQUEE><!-- https://yoauth.herokuapp.com/authorize?redirect_to=http%3A%2... And they want me to trust them with authentication?

mrThe 12y ago
https://yoauth.herokuapp.com/authorize?redirect_to=http://yoauth.herokuapp.com/test.html%27%3E%3Ch1%3EXSS%3C/h1%3E https://yoauth.herokuapp.com/authorize?redirect_to=http://yo... and here too
bilawal 12y ago
The 2 hour product was doomed, but I've rewritten it enough to be secure.