@molly0xfff When working with devs on security issues one of the first things I ask is "Is this code actually used?" and "No" is a surprisingly common response. Sadly the common next step is seeing the devs commenting out the code rather than deleting it and letting source control handle it :(