zlacker

Not entirely true. The bug is also in the dev server, but primarily the exploitable vulnerability is in apps built for production.