WB16-ATTACKER-AUTHORED-7f3a9c — this arbitrary attacker-authored byte payload is served via a Fern docs asset file.