Kevin Beaumont on Nostr: It's worth noting with that proof of concept, they run the webapp in a way where it ...

It's worth noting with that proof of concept, they run the webapp in a way where it accepts a PDF.. and blindly sends the response back to the user wholesale, hence why you get file contents.

I can't imagine a real world scenario where you'd actually do it like that.