LPS-39721 Trust Boundary Violation (CWE-501) with Facebook Access Token