nvh95 / react-linkedin-login-oauth2

Easily get Authorization Code from Linked In to log in without redirecting.

CSRF token not tested

clemlem opened this issue 5 years ago · comments

clemlem commented 5 years ago

react-linkedin-login-oauth2/src/LinkedIn.js

Line 29 in 3a91215

receiveMessage = (event) => {

state should be tested here to ensure there no attack.

Hung Viet Nguyen commented 5 years ago

@clemlem Thanks for your feedback. It is resolved in version 1.0.7