Hidden OAuth attack vectors | PortSwigger Research

https://portswigger.net/research/hidden-oauth-attack-vectors