Reproduction of a curious security risk (from server-side standpoint) - View it on GitHub