Comment by Flimm

It's disappointing that Meta chose not to fix this and chose not to reward this researcher with a bug bounty.