Cloudflare: Reflected XSS on partners.cloudflare.com

partners.cloudflare.com is vulnerable to reflected XSS because its 404 page reflects the path inside a block without encoding it. This vulnerability could be used to hijack partner accounts. The following URL demonstrates this vulnerability - if you load it in Edge you'll see an alert screenshot...