XSS seems to work again after change to linkpop at https://linkpop.com/testnaglinagli

Shopify disclosed a bug submitted by nagli: https://hackerone.com/reports/1569940 – Bounty: $1600