One of the most serious allegations involved what he described as a hardcoded “master password” allegedly visible inside publicly accessible JavaScript files. “That bundle is served publicly. Anyone ...