Stored XSS on www.hackerone.com due to deleted S3-bucket from old page_widget