两个Oauth协议相关漏洞细节

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