SAMPLE EVIDENCE for IN-01 (made-up app Tidyhaus; not a real review)

Saved bio as returned by the API: "<img src=x onerror=alert(1)>"