Can someone explain the “Covert Redirect” vulnerability in OAuth and OpenID? | Heykuki News