Please report security issues privately to the repository owner instead of opening a public issue.

Include:

• A short description of the issue.
• Steps to reproduce.
• Expected impact.
• Any relevant version, browser, or deployment details.

This sample does not persist uploaded or pasted JSON payloads. If you deploy it, treat the deployed instance as part of your own trust boundary and avoid pasting secrets into public or third-party deployments.