Cdb Snitch

Snitch reporting-assistant popup. Deliberately does NOT query the DB or re-run the client-reason rewrite — it's opened via window.open() FROM an already-authenticated /cdb/{scan_id} tab and reads its data straight off window.opener's #snitchData island (same-origin read). If window.opener is missing (direct navigation, or the opener tab was closed), the page's own JS shows a "open this from your report" fallback rather than erroring — there's nothing sensitive served by this route itself, so no password check is needed here.