A vulnerability disclosure case study showing how sensitive internal material was exposed through a public client-side JavaScript bundle.