MangaDex security post-mortem: Reflected XSS in Auth. Callback | Hacker News Reader