Security: OAuth callback does not validate state parameter
#1189
+27
−2
state parameter
#1189