phr0nak

Sorry to hear that. I'll fix this issue as soon as possible.

Sorry, I don't want to publish it.

I think you're wrong. Read carefully the "Exclusion"'s section on https://www.facebook.com/whitehat

Thanks for your comments :)

As you said, checking the User-Agent does not offer much security, but at this point, is more than nothing. I know that Instagram team are studying other ways (csrftoken among others) to protect their website or application against this kind of attacks. Thanks.