Covert Redirect Vulnerability with OAuth 2
tl;dr Covert Redirect Vulnerability is a real, if not new, threat when combined with Implicit Grant Flow (not Code flow) This Covert Redirect Vulnerability in OAuth 2 is an interesting one. There’s a couple of defending arguments that this isn’t a flaw in OAuth itself. While I agree that it isn’t a flaw in the protocol, I think the threat is a real one, combined with a) a loose validation on redir
Tatsuhiko Miyagawa's blog
July 07, 2023 miyagawa.co Last month, Medium silently decided to kill the legacy custom domains for free tier users, and broke my blog (weblog.bulknews.net) without any notice. Since this happened during my trip to Europe, I decided to sign up for their paid plan just for one month as a temporary solution. Now that I’ve returned from my trip, I successfully imported all my articles from Medium to
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
