Limits
What the checker does not do.
Boundaries
- The checker does not log in.
- It does not test passwords.
- It does not run scripts.
- It does not contact private, loopback, or cloud-metadata addresses.
- Path, query, and fragment never leave the browser.
What the checker does not do.