Can someone explain the “Covert Redirect” vulnerability in OAuth and OpenID? | Hacker News Reader