Limited retrieval
Each source client has approved HTTPS addresses, expected data structures, limits on pages and bytes, and timeouts. Redirects and content types are checked before data is accepted.
Publication checks
Text is escaped, links are validated and privacy audits run before publication. A restrictive content security policy limits what the page can load, and links do not send referrer information.
Static delivery
There is no public submission form, victim search, breach-letter retrieval, runtime database or application server.