Six findings on the same /upload endpoint from the
worked example. Guess the STRIDE letter before it's revealed — that is the
whole exercise Task 2 of the worksheet asks you to repeat on your own DFD.
/upload
Score: 0/6
✓ Full STRIDE pass done — 5–6 threats, from ONE endpoint.