[doopy1]

You can look at the disclosed reports on hackerone and get a feel for the kind of stuff that's being exploited and how it's being addressed.