Bug bounty tips: exploiting XSS on Instagram Farhan Abbas shares an intriguing XSS bug recently discovered on a site lacking a bug bounty program.