Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
3
Newest
 Supporter
Impact
~237 people reached

  • 0 posts edited
  • 0 helpful flags
  • 1 vote cast
Sep
15
awarded  Supporter
Sep
15
revised Are most app OAuth implementations vulnerable because of an obscured URL/origin?
Grammar fix.
Sep
15
comment Are most app OAuth implementations vulnerable because of an obscured URL/origin?
I just added another example and clarified some language. The problem within apps is that the authentication webpage is not displayed in a first-class web browser... just in an embedded web viewport within the application - no address bar, protocol, or non-spoofable way to indicate if it is HTTPS.
Sep
15
awarded  Editor
Sep
15
revised Are most app OAuth implementations vulnerable because of an obscured URL/origin?
Added another example and clarified problem.
Sep
14
awarded  Student
Sep
14
asked Are most app OAuth implementations vulnerable because of an obscured URL/origin?