XSS DOM bug found in 'Login with Facebook' worth $20K | Hacker News Reader