Here comes a new, Web-wide security threat -- this time for OAuth & OpenID

"In the real world, a large number of third-party applications do not adhere to a whitelist to patch this vulnerability. This makes the systems based on OAuth 2.0 or OpenID highly vulnerable."