Can someone explain the “Covert Redirect” vulnerability in OAuth and OpenID?security.stackexchange.com3 pointsmarkolschesky12 years ago