Blind XSS in app.pullrequest.com/████████ via /reviews/ratings/{uuid} https://hackerone.com/reports/1558010 994 views20:08