Blog post about the mentioned JWT query. Link to the Security Lab’s CodeQL Bug Bounty program. Your browser does not support the video element.