{"link":"https://owaspsecure.com/demo/a04_insecure_design/attacks/magic_link/link_insecure.php?token=BZFEP3p9-s2AExNupJTfVA0a2rjIw0yD","token":"BZFEP3p9-s2AExNupJTfVA0a2rjIw0yD","notes":{"no_storage":"Server does not store tokens, so they cannot expire or be invalidated.","reusable":"Anyone with the link can use it forever.","not_bound":"Not bound to user/device/IP; easy to forward/share."}}