HackerOne Bug Bounty Disclosure: csrf-(protection-bypassed)-to-force-a-below-18-user-into-viewing-an-nsfw-subreddit-!bymarvelmaniac