XSS DOM bug found in 'Login with Facebook' worth $20K · HackerTrans