Hacker Next
Stealing OAuth tokens of Microsoft accounts via open redirect in Harvest Appeval.blog
367 points by skilled 530 days ago | 104 comments