Very interesting read. Author should have submitted the problem and solution as part of a bug bounty perhaps. Something for us all to watch out for.