McDonald's forget hash, browns off security experts

Golden Arches website's security doesn't pass the sensible surfing taste test

Dutch software engineer Tijme Gommers has revealed a still-active reflected cross-site scripting vulnerability and borked password controls in McDonald's main website that could be fodder for phishing attacks."