json-content-type

20260916-181749 轮 · 看它的历史
靶子 http://localhost:20098  容器 wt_h8_tp8

A · JSON 出口:Content-Type = application/json 且 body 无裸 `<`
  ✓ [apiReturn] /index.php/WxPublicApi/getContactInfo → application/json  实得 "application/json; charset=utf-8"
  ✓ [apiReturn] /index.php/WxPublicApi/getContactInfo → body 无裸 <  裸< = 0
  ✓ [apiReturn] /index.php/WxPublicApi/getContactInfo → body 仍是合法 JSON
  ✓ [apiReturn] /index.php/WxPublicApi/getTplInfoTmp/tplid/2153 → application/json  实得 "application/json; charset=utf-8"
  ✓ [apiReturn] /index.php/WxPublicApi/getTplInfoTmp/tplid/2153 → body 无裸 <  裸< = 0
  ✓ [apiReturn] /index.php/WxPublicApi/getTplInfoTmp/tplid/2153 → body 仍是合法 JSON
  ✓ [apiReturn] /index.php/WxPublicApi/agreementContent/name/privacy_policy → application/json  实得 "application/json; charset=utf-8"
  ✓ [apiReturn] /index.php/WxPublicApi/agreementContent/name/privacy_policy → body 无裸 <  裸< = 0
  ✓ [apiReturn] /index.php/WxPublicApi/agreementContent/name/privacy_policy → body 仍是合法 JSON
  ✓ [apiReturn] /index.php/Index/getcartnum → application/json  实得 "application/json; charset=utf-8"
  ✓ [apiReturn] /index.php/Index/getcartnum → body 无裸 <  裸< = 0
  ✓ [apiReturn] /index.php/Index/getcartnum → body 仍是合法 JSON
  ✓ [jsonResponse] /index.php/Flash/getuploadattr → application/json  实得 "application/json; charset=utf-8"
  ✓ [jsonResponse] /index.php/Flash/getuploadattr → body 无裸 <  裸< = 0
  ✓ [jsonResponse] /index.php/Flash/getuploadattr → body 仍是合法 JSON
  ✓ [jsonResponse] /index.php/Flash/getPrintModel → application/json  实得 "application/json; charset=utf-8"
  ✓ [jsonResponse] /index.php/Flash/getPrintModel → body 无裸 <  裸< = 0
  ✓ [jsonResponse] /index.php/Flash/getPrintModel → body 仍是合法 JSON
  ✓ [jsonResponse] /index.php/Flash/getTemplates → application/json  实得 "application/json; charset=utf-8"
  ✓ [jsonResponse] /index.php/Flash/getTemplates → body 无裸 <  裸< = 0
  ✓ [jsonResponse] /index.php/Flash/getTemplates → body 仍是合法 JSON
  ✓ [jsonResponse] /index.php/WxPayV3/query → application/json  实得 "application/json; charset=utf-8"
  ✓ [jsonResponse] /index.php/WxPayV3/query → body 无裸 <  裸< = 0
  ✓ [jsonResponse] /index.php/WxPayV3/query → body 仍是合法 JSON
  ✓ [jsonResponse] /index.php/Flash/getalbum → application/json  实得 "application/json; charset=utf-8"
  ✓ [jsonResponse] /index.php/Flash/getalbum → body 无裸 <  裸< = 0
  ✓ [jsonResponse] /index.php/Flash/getalbum → body 仍是合法 JSON
  ✓ [jsonResponse] /index.php/Flash/getalbumSince → application/json  实得 "application/json; charset=utf-8"
  ✓ [jsonResponse] /index.php/Flash/getalbumSince → body 无裸 <  裸< = 0
  ✓ [jsonResponse] /index.php/Flash/getalbumSince → body 仍是合法 JSON

B · 改密码页读得到服务端文案(text/html 时这里是 "* undefined")
  ✓ B1 POST 真的发出去了且服务端带回了那句文案  body={"data":"\u4fee\u6539\u5931\u8d25,\u5bc6\u7801\u9519\u8bef\u
  ✓ B2 页面显示服务端那句真文案  hint="* 修改失败,密码错误,请重试"
  ✓ B3 页面不再显示 undefined  hint="* 修改失败,密码错误,请重试"

C · 守卫:getalbum / getalbumSince 的 'false' 分支必须原样
  ✓ C getalbum 的 'false' 分支 body 逐字是 false  实得 "false"
  ✓ C getalbum 的 'false' 分支仍是 text/html  实得 "text/html; charset=UTF-8"
  ✓ C getalbumSince 的 'false' 分支 body 逐字是 false  实得 "false"
  ✓ C getalbumSince 的 'false' 分支仍是 text/html  实得 "text/html; charset=utf-8"

D · 守卫:渲染页仍是 text/html
  ✓ D /index.php/Index/index 仍是 text/html  实得 "text/html; charset=utf-8"
  ✓ D /index.php/Index/index_lianxi 仍是 text/html  实得 "text/html; charset=utf-8"

E · WxPayV3::query 越权分支 = 403(曾被 TP8 覆盖成 200)
  ✓ E1 越权/不存在的单返 403  实得 403
  ✓ E2 且是 application/json  实得 "application/json; charset=utf-8"

F · 顶层导航到 JSON 端点不再渲染出元素
  ✓ F1 顶层导航后页面里没有 <img> 元素  实得 0 个

PASS=42 FAIL=0