News for hackers. Stuff that matters.
Re:Google's login page accepts a vulnerable GET parameter by woliveirajr on Wednesday August 31, 2016 @11:49AM (#12399179)
It's worst than that. Below (or somewhere in this thread) you'll find some example posted by kuschku: you don't land in someone else domain, you're still in the Google domain, you'll just find out that you're viewing someone's else page if you see the full URL.

There are no comments on this comment yet.