> Hats off to you, no idea why you wouldn't just sell this off considering how poorly your honesty is rewarded. Aside from the ethical considerations you'd hav

> Hats off to you, no idea why you wouldn't just sell this off considering how poorly your honesty is rewarded. Aside from the ethical considerations you'd have to navigate, there isn't a market for vulns like this outside of bug bounties. People on HN always cite Zerodium or whatever but don't realize those markets exist for vulns with a long half life. The expected return on a vuln which exists in one website is quite bad.