another day, another account takeover caused by an open redirector and the OAuth Implicit flow 🫠

https://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com