What is real importance of the OAuth *state* parameter is?

https://news.ycombinator.com/item?id=39698229
by DBformore • 2 years ago
1 2 2 years ago

A lot of developers are not sure about the answer.

Security researchers from Salt could install malicious ChatGPT plugins, just because of a minor state mistake that ChatGPT made.

If you want to understand OAuth, this post is for you: https://salt.security/blog/security-flaws-within-chatgpt-extensions-allowed-access-to-accounts-on-third-party-websites-and-sensitive-data

Related Stories

Loading related stories...

Source preview

news.ycombinator.com