Bugs in vendor or partner-operated web applications