$10k Host header vulnerability in Google App Engine | Hacker News Reader