News for hackers. Stuff that matters.

A comment on Microsoft Account's OAuth tokens leaking via open redirect in Harvest. Parent comment

Re:Microsoft Account's OAuth tokens leaking via open redirec... by Uvix on Sunday October 22, 2023 @01:33PM (#37977380)
Allowing the query string to be altered is allowed but discouraged by the OAuth 2.0 spec: https://datatracker.ietf.org/doc/html/rfc6749#section-3.1.2....
[ Parent | on HN ]
Re:Microsoft Account's OAuth tokens leaking via open redirec... by matja on Sunday October 22, 2023 @01:42PM (#37977451)
Interesting, thanks!
[ Parent | on HN ]