Sample page

A tiny app with a planted key.

This page is fake. The credentials in the source are not real. They exist so Burnproof can show a bill-risk finding. Use “Scan the sample page” on the Burnproof home page. Pasting a localhost URL is refused on purpose.

The planted values live in a script tag, the way a vibe-coded bundle leaks them.