Hacktivity from nismo
https://hackerone.com/reports/166887
Unsanitized Location Name in POS Channel can lead to XSS in Orders Timeline
https://hackerone.com/reports/166887