ParentFull threadtalkin·No, it wasn’t.It’s not validating reused codes or tokens from an application owned by attacker.View on HN