@acarson plus they probably short circuited a byte string comparison and fucked everything up. If only I got extra cash for CVEs back when I reported them