Want everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.
Mal can now check his server log and hijack Vic's session, since the malicious redirect passed his session ID in the URL.
output.log
