Comment 8 for bug 1873290

Revision history for this message
Gage Hugo (gagehugo) wrote : Re: OAuth1 request token authorize silently ignores roles parameter

Yes, it's looking like unintended privilege escalation, so Class A in this case.