Security News > 2015 > April > Open redirect in rfc6749 aka 'The OAuth 2.0 Authorization Framework' (Reddit)