jwjenkin

FWIW, it doesn't seem that `tracker.setCampaignParamsOnNextHit()` is being fired anywhere (or the `if`s in the Tracker class are preventing it), so none of the campaign vars appear to be available....

I have a ton of these, would be phenomenal to use them without the alarm necessarily

Is this the same pop chain vuln that is only an issue if you pass unserialized user input directly into the function then?