Stealing user session with open-redirect bug in Rails | Heykuki News