Mail.ru: [rm.mail.ru] Request-Path XSS

Reflected XSS via GET paramters. rm.mail.ru is not covered by bug bounty program...