Articles about web development, AI, and technology
A reused OAuth client secret let an attacker forge Flask session cookies and run Python code on Google's DevSite servers, which power developers.google.com and six sibling documentation sites.