J josipfranjkovic.com Stealing Facebook access_tokens using CSRF in device login flow 127 points franjkovic 10 years ago 82 comments
