event-stream vulnerability explained | Hacker News Reader