*bump*shopify, we need it too. 

@Shay since asked by shopify staff to disclose the details; i will do so here and now.1. create draft order2. send draft order ( or if draft is created by api, someone just needs a copy of the draft order url )3. customer opens draft order, and saves...

Found a bug that effects all shopify stores;it allows customers to use and checkout a Draft Order, after it's been deleted. I tried submitting to hackerone, they closed it as "informative."I contacted support, was submitted as a "Merchant Frustration...