X (Formerly Twitter) disclosed on HackerOne: Insecure Data Storage...
**Webview Activity is storing third party Username & Password in plain text .**
hackerone.com