> Yes, $100k is not a lot of money for an issue like this. Requiring rare user action and document URL? Sure. Live in your bounty bubble. > If I had a vuln li

> Yes, $100k is not a lot of money for an issue like this. Requiring rare user action and document URL? Sure. Live in your bounty bubble. > If I had a vuln like that and knew they were only paying $100k, I would probably seek to monetize it elsewhere. But you don't. The person exploiting it knows how much it is worth. > $3k is almost insulting for something like this Not for you to decide. He accepted it, meaning it's not insulting.