In four tests using a researcher-owned account, a local document with the QA origin made credentialed requests to the production console. Each test created a temporary API key that authenticated a separate request to the Redis Cloud API without browser cookies.
| Run | Origin read | Key created | No keys | With keys | Deleted |
|---|---|---|---|---|---|
| 1 | 200 | 200 | 401 | 200 | 204 |
| 2 | 200 | 200 | 401 | 200 | 204 |
| 3 | 200 | 200 | 401 | 200 | 204 |
| 4 | 200 | 200 | 401 | 200 | 204 |
The QA-origin document was supplied locally by Playwright. No request was sent to the QA host. An authenticated production navigation with the public entry URL made zero requests to that entry and loaded Redis’s own databases module. The public entry has not been loaded by the live QA application. A live one-click account takeover has not been verified. The QA host is absent from the program’s current structured scope.
Sanitized machine-readable results · Harmless Module Federation marker
This page contains no account identity, cookie, API key, or secret.