The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage.