Vulnerability type (e.g. CSRF, XSS, SSRF, Access Control).
Step-by-step proof of concept (PoC).
Affected API endpoint or URL.
3. Safe Harbor Commitments
Good-faith security research complying with this policy will be protected under full legal safe harbor, and will not be subject to civil litigation or law enforcement referral.