clickjacking vulnerability report hackerone