Security News > 2016 > January > How I Stole Plunker Session Tokens with an Angular Expression Injection (Reddit)