#1048322 SMAP bypass

https://hackerone.com/reports/1048322