In all honesty, the only place I checked was the [FAQ](https://stacker.news/faq). I didn't even think of checking the README in the Github repo -- but next time I will.

orthzar

Ah, yes, you are right, sorry.

I forgot that there are no instructions regarding this in the README. I will add some.

Thanks again!

bitcoin

Open redirection issue on "?callbackUrl=" parameter 

ShellInjector

>In the future, please do responsible disclosures, for example by DMing @k00b or me in TG. You can find us in this group: https://t.me/stackernews

While I was writing my Github issue for this bug, I looked for SN's disclosure policy and couldn't find it. Also, I don't have a phone, so Telegram wouldn't have been an option.