PASS: token validation, BIGINT handling, CSRF, actions, UUIDs and unsubscribe view states. No database connection was opened. Complete the browser/database checks in INSTALL.md.