F-295 stub app
Minimal Clerk customer app used as the legitimate consumer of the prod instance during Bugprimer F-295 verification.
Not signed in. Use the header buttons to sign up a victim user.
POC attacker-receiver
/api/attacker-receiver logs every query param it receives. Used as the F-295 magic-link redirect target. Inspect captures via vercel logs on this Vercel project.