XSS ON THE OAUTH CALLBACK URL WITH CSP BYPASS LEADING TO ZERO-CLICK ACCOUNT TAKEOVER

Summary from the TLDR InfoSec newsletter

This blog post goes into depth into how you can exploit an OAuth callback URL to create a zero-click account takeover.