Security News > 2015 > March > Format Injection Vulnerability in Duo Security Web SDK (Reddit)