HackerOne Bug Bounty Disclosure: bypassing-cache-deception-armor-using–avif-extension-filebybombon