DOM XSS in tiktok.com/login via the redirect_url parameter TikTok disclosed a bug submitted by sh1yo: https://hackerone.com/reports/2583874 [Source]