Shell command injection on Mac via Sublime Text third-party click handler | Hacker News Reader