hackerone Static Resource Server Vulnerabilities