UK FrictionLab
← back to finder
Security — Open Opportunities Finder
- The search endpoint validates and length-limits all inputs (keyword capped at 120 chars).
- Outbound requests go only to data.gov.uk and the official portals.
- No server-side secrets, no third-party scripts, no tracking identifiers.
- Responses are JSON with strict field shapes; no user input is reflected into HTML unsanitised (the UI builds DOM nodes, not innerHTML from raw query text).