CVE-2026-13323 Reproduction Verdict
====================================
Vulnerable version: v1.0.1
Fixed version: v1.0.2

VULNERABLE (v1.0.1) headers for /vscode/unpkg/.../payload.html:
  Content-Type: text/html
  Content-Security-Policy: MISSING
  Content-Disposition: MISSING

FIXED (v1.0.2) headers for /vscode/unpkg/.../payload.html:
  Content-Type: text/plain;charset=utf-8
  Content-Security-Policy: present

Vulnerability confirmed: true