|
|
|
|
|
|
by ignoramous
1480 days ago
|
|
|
An adversary prompts the website to send you a magic link. You happen to click on it by chance. Guess who has access to your account? As others have pointed out, either login when the user has both generated and clicked on the magic link from the same IP (browser, where possible), or use magic codes (as opposed to links). |
|
|