crazy how this makes it all the way to production, I wonder how long this vulnerability was exposed...