{"link":"https://www.owaspsecure.com/demo/a04_insecure_design/attacks/magic_link/link_insecure.php?token=gmSI2jwVQoH_Wdbip0Lr_WKgxwYC5aLN","token":"gmSI2jwVQoH_Wdbip0Lr_WKgxwYC5aLN","notes":{"no_storage":"Server does not store tokens, so they cannot expire or be invalidated.","reusable":"Anyone with the link can use it forever.","not_bound":"Not bound to user/device/IP; easy to forward/share."}}