From a956c701dd3c09f2af99268206085d31b6960238 Mon Sep 17 00:00:00 2001 From: Bill Burke Date: Tue, 31 May 2016 21:15:09 -0400 Subject: [PATCH] fixes --- topics/threat/redirect.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/topics/threat/redirect.adoc b/topics/threat/redirect.adoc index 0019d01387..2102035aa8 100644 --- a/topics/threat/redirect.adoc +++ b/topics/threat/redirect.adoc @@ -2,7 +2,7 @@ [[_unspecific-redirect-uris]] === Unspecific Redirect URIs -For the <>, if you register redirect URIs that +For the <>, if you register redirect URIs that are too general, then it would be possible for a rogue client to impersonate a different client that has a broader scope of access. This could happen for instance if two clients live under the same domain. So, its a good idea to make your registered redirect URIs as specific as feasible.