XFdestek
Kurucu Üye
Starting a connected account association is done via
Example
Suggested Mitigation
Only start the process with
GET, this allows to trick users into clicking a link that starts a connected account association which they might not want to perform.Example
Suggested Mitigation
Only start the process with
POST, if called via GET show a confirmation (or an error if it's not a navigational request).