Thanks for the report, this has been patched 
Do I get a bounty?
I'll test it out later and ensure it is patched correctly.
If you feel compelled to tip for any reason: http://1v.io/m8r-74xku9@mailinator.com
Note: I haven't actually scammed anyone, this account received a precautionary scammer tag.
You only receive a bounty / reward if you disclose something responsibly (ie email it to support@inputs.io). Let us know if you have any other reports.