Mass account takeovers using HTTP Request Smuggling on https://slackb.com/ to steal session cookies https://hackerone.com/reports/737140