Shopify disclosed a bug submitted by hazemhussien99: https://hackerone.com/reports/1591403 – Bounty: $500 [Source]