===[INJECTED-JS-IN-chrome://headless-WITH-BROWSER-CDP]===
===[READ-file:///tmp/poc-secret.txt-VIA-CDP]===
TOP-SECRET-MARKER-2f9a5b
This file should never be readable by a remote URL.