intridea/omniauth-oauth2 — pull request #25 by homakov (2012-09-08 09:26:40+00:00)
Title: CSRF vulnerability, injecting state in session

PoC https://gist.github.com/3673012