Want everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.
Version 2.0 of the Open ID specification allows for service discovery via XML. If the Open ID implementation is insecure, this allows harmful XML to be injected.
