Code inject via nginx.ingress.kubernetes.io/permanent-redirect annotation

Kubernetes disclosed a bug submitted by jkroepke: https://hackerone.com/reports/2039464 – Bounty: $2500