df7c23bf96aefbe619389a6f0ad96d42f81145cb9803f8cebc45b1d62e0e2029  evidence\01-reviewed-revision.txt
294bec525c8f7f3bcb7fd622f6493a0c132504edd37a0cb39c38a4ab0e28a942  evidence\02-public-routes.txt
ae2aaaa6740800e1cc0814bcd565f7424a505e01f4fd6f5bac8567705bfe0018  evidence\03-origin-header-to-baseurl.txt
76d27351224e17e71d67f1869af70ae65a8657e0283a57fba12845f0dee6ff34  evidence\04-fail-open-baseurl-validation.txt
c3a7f3a331850d502ab6e5a5abe6b946d58ce680d492d9b563aa82c4ec6bd97c  evidence\05-token-link-construction.txt
53151923caac888f7b9a44bee7adf9e16138500b70f812a601b07580d352558c  evidence\06-configuration-context.txt
b858c29c64261de4165148c269af7565324dee9aa80660014c49e11d45e18833  evidence\07-dataflow-proof.md
8b2b114fab12fcb9dd371554655351a5ef896a92abb65ed349eeb590f8a497b3  evidence\08-severity-rationale.md
270f0c42252023361edb8e64f95fc6ffc49e851e4cd6bcce36abde0c9434a863  evidence\source-excerpts\admin-ui.txt
60c583f69a483c9e7289aaf7001c7d53d8f99fbbfb181c7c99610a47e80bd710  evidence\source-excerpts\controller.txt
c990e4e9e63c0278d05bbfb260b8570759ab5daa103b16682bc9ec7d6f5a3adc  evidence\source-excerpts\securityconfig.txt
e2ac04f95d8aecdad97eb420e1b7beb8fe166a7fbe1a454b63bca641d144a2d9  evidence\source-excerpts\service.txt
98d438f253809e5d83c30b590190ea3159c403d664339dc25c9976514b793762  report\advisory.md
fb40fb6eb3d9129e2068903b956e0f41f9fe73051d0580b02209755a0a5113e6  report\affected-products.txt
227b334864de9ce198ccfb6afe8a03d166ee987bfdba8d75a891183fa41b7b66  report\cvss.txt
0e9c68e614d370484fcfd4e881b3d0934543482bb879bcaead0f88cde7c0ab81  report\cwe.txt
ed5321753ec44784b4c37c4692210e5a241846625aafb115a74a573ba5af21ee  report\executive-summary.txt
f30d910b026da2fb21fea65503df4c7a815c2bc1f411e7323316f9d526a5f816  report\github-description.md
0d7721c53eefe24691b797bb09a5ec624b32f4fd96713eb98898b94ebe72638e  report\mitigation.md
4fa3c0d004d0750fc7bf8631993bd7c668fd33f8d089e0103ad8ef3fc1d9f4bb  report\severity.txt
7fed597d2eebb375a951c00883f3ef98d8c2222e4d6cb2b494aade41b0151402  report\title.txt
b6cea8ba7cf88794bd7882e4918adfbf2dd96dbd331095ce4707788861c56ced  report\validation.md
40afe3ac44fd708c49cb55fc408e05b08626d33b685e5c1df7b3b71288094da4  scripts\collect-local-evidence.ps1
