1

Q: Why data exchange using redirection via query params/auto-form-post CANNOT be trusted even on https?
This is somewhat a basic question but the reason is not spelled out clearly anywhere.
Say we have 2 web applications running on https://one.abc.com and htts://two.xyz.com.
I visit https://one.abc.com and a page is displayed which has a button on it and when clicked, submits to https://one.abc.com...