Web application security audit of a QR code solution