Re:Google's login page accepts a vulnerable GET parameter
by woliveirajr on Wednesday August 31, 2016 @11:49AM
(#12399179)
It's worst than that. Below (or somewhere in this thread) you'll find some example posted by kuschku: you don't land in someone else domain, you're still in the Google domain, you'll just find out that you're viewing someone's else page if you see the full URL.
[ Parent
| on HN ]
There are no comments on this comment yet.