I can't find an explanation of the actual vulnerability. The supposed 
explanation is a 403: http://tetraph.com/covert_redirect/

On 5/2/2014 7:59:10 AM, Shane Tomlinson <[email protected]>wrote:
Is our OAuth implementation susceptible?

http://www.cnet.com/uk/news/serious-security-flaw-in-oauth-and-openid-discovered/
_______________________________________________
Dev-fxacct mailing list
[email protected]
https://mail.mozilla.org/listinfo/dev-fxacct
_______________________________________________
Dev-fxacct mailing list
[email protected]
https://mail.mozilla.org/listinfo/dev-fxacct

Reply via email to