Public ThisData bug reports.

Team Bounty Title
ThisData - Insecure Cache-Control Leading to API key Retrieval
ThisData - Host Header Poisoning in thisdata.com
ThisData - STORED XSS FOUND
ThisData - Login CSRF using Google OAuth
ThisData - Xss via Dropbox
ThisData - Missing SPF header on revert.io