Model-based Security Testing: An Empirical Study on OAuth 2.0 Implementations
More Guidelines Than Rules: CSRF Vulnerabilities from Noncompliant OAuth 2.0 Implementations