{"link":"https://owaspsecure.com/demo/a04_insecure_design/attacks/magic_link/link_insecure.php?token=3lpX-vROXjedpP5_zt7ggSgmPNnxYCFw","token":"3lpX-vROXjedpP5_zt7ggSgmPNnxYCFw","notes":{"no_storage":"Server does not store tokens, so they cannot expire or be invalidated.","reusable":"Anyone with the link can use it forever.","not_bound":"Not bound to user/device/IP; easy to forward/share."}}