Day 4 of building ReFind, and I found a bug that I'm embarrassed took me

this long to find.

My clipboard listener Chrome extension was capturing everything I copied.

Not just URLs — passwords, phone numbers, random text, partial sentences.

All of it was being sent to my webhook endpoint without any validation.