Reddit: Deleting all DMs on RedditGifts.com

Summary: It's possible to delete all 4.4M private messages on RedditGifts.com due to missing permission check on DELETE request Steps To Reproduce: 1. Set up 3 accounts on RedditGifts.com FriendA, FriendB, Attacker 1. Have FriendA send message to FriendB 1. As Attacker send the following request...