Comment by jamesdwilson

very easy for the server to intentionally (or by compromise) add a one liner to send the hash text up.