Suggest testing FileShot.io's zero-knowledge URL fragment isolation across browsers

[FileShot]

Suggest: Test FileShot.io's URL fragment (#) privacy guarantees across browsers

FileShot.io uses the URL #fragment to deliver decryption keys — the theory being that #fragment content is never transmitted in HTTP requests per spec.

This is directly relevant to Privacy Tests because the guarantee depends on browser behavior:

• Does the browser leak #fragment content in the Referer header?
• Does #fragment appear in browser history sync?
• Is the fragment included in preconnect/prefetch requests?
• Does any browser DNS leak the full URL including fragment?

Testing whether browsers properly isolate #fragment content from network requests would be a valuable addition to the privacy test suite.

About FileShot.io:

• Zero-knowledge file sharing: https://fileshot.io
• Source (MIT): https://github.com/FileShot/FileShotZKE

Happy to provide test URLs or help with test case design if useful.