HTML injection on newsroom.snap.com/* via search?q=1