Comment Comment by holdenc Yeah, apparently it's a known vector: https://hackerone.com/reports/121461 parent holdenc 6 years ago
