A New OAuth Vulnerability in a Framework Used in Hundreds of Websites · HackerTrans