“http”的搜索结果

Hunt HTTP request smuggling (CL.TE, TE.CL, H2.CL, H2.TE). Cause: front-end proxy and back-end server disagree on where one request ends and the next begins (Content-Length vs Transfer-Encoding header parsing inconsistency). CL.TE: front-end uses CL, back uses TE → smuggle by sending TE: chunked but with body that fits CL count. TE.CL: opposite. H2.CL: HTTP/2 downgrade, smuggle CL into HTTP/1.1 back-end. Detection tools: Burp HTTP Request Smuggler extension, smuggler.py, h2csmuggler. Confirm: time-delay technique (smuggled GET with 30s timeout) — if front-end returns slow on next victim request, smuggling works. Validate: cache poisoning chain (smuggle request that gets cached for victim), credential theft (smuggle X-Forwarded-For override that captures next user's cookies), bypass auth (smuggled internal-path request). Real paid examples from major CDN deployments. Use when hunting H1 paid programs running CDN+origin stacks, when targeting load balancer / WAF bypass.

中文简介正在准备中。当前显示原文说明。

Design, change, or review an HTTP/JSON API surface — endpoints, request/response shapes, authentication and authorization, pagination, idempotency, rate limits, versioning, and deprecations. Use when adding or modifying an HTTP endpoint, reviewing an OpenAPI spec or HTTP route diff, or deciding whether an HTTP API change breaks consumers. Do not use as a protocol-compatibility checklist for gRPC/protobuf, GraphQL, WebSockets, or other non-HTTP/JSON interfaces.

中文简介正在准备中。当前显示原文说明。

在 Skynet 框架下，仅使用 skynet.httpc 和 luasec 库编写 HTTPS 请求代码，避免使用 ltn12 或不存在的 API 接口。

中文简介正在准备中。当前显示原文说明。

Adds HTTP endpoints in convex/http.ts: webhook receivers with signature checks, REST style routes, CORS, auth headers, streaming responses, and file uploads over HTTP. Use when integrating Stripe, Clerk, Resend, or any service that calls back into the app, or when a client needs a plain HTTP API.

中文简介正在准备中。当前显示原文说明。

Testing Angular 18-21: TestBed, component harnesses (@angular/cdk/testing), Karma+Jasmine (default historical) vs Jest (jest-preset-angular, modern), Angular Testing Library (RTL-style). HttpClient mocking via HttpTestingController. NgRx Effects testing. Cypress / Playwright e2e. Use this skill to: - Detect runner (Karma+Jasmine vs Jest) and configure correctly. - Write component tests with TestBed. - Use component harnesses for Material / custom UI components. - Mock HttpClient via provideHttpClientTesting + HttpTestingController. - Test signal-based inputs with componentRef.setInput(). - Test NgRx Effects with provideMockActions. Do NOT use this skill for: - General Angular conventions (see angular-conventions). - Routing patterns broadly (see angular-routing — covers testing routes briefly). - Form patterns broadly (see angular-forms).

中文简介正在准备中。当前显示原文说明。

Use when building Python async HTTP services or clients with aiohttp - web server routing, middleware, WebSocket, SSE, streaming, client sessions, pytest-aiohttp testing, or troubleshooting SSL and timeout issues

中文简介正在准备中。当前显示原文说明。

Implement HTTP data fetching in Angular v20+ using resource(), httpResource(), and HttpClient. Use for API calls, data loading with signals, request/response handling, and interceptors. Triggers on data fetching, API integration, loading states, error handling, or converting Observable-based HTTP to signal-based patterns.

中文简介正在准备中。当前显示原文说明。

HTTP Request Smuggling — frontend/backend HTTP parser uyumsuzluğunu sömürerek auth bypass, cache poisoning, internal endpoint erişimi

中文简介正在准备中。当前显示原文说明。

按统一规则设计和审查REST API的URL、响应格式与错误处理，并整理分页、身份验证、请求次数限制和版本管理方案。

• 设计新API的端点
• 审查现有API规范
• 添加分页和筛选功能

协助在家庭网络部署Pi-hole，拦截广告和恶意软件域名，管理拦截列表、加密DNS通信、配置设备名称，并排查连接与域名解析问题。

• 在家庭网络启用域名拦截
• 管理拦截列表并修正误拦截
• 加密发往外部的DNS通信

检查已发布网址的页面与API响应、静态文件、持续连接及性能变化。支持单次检查、指定时段监控，以及测试环境与生产环境对比，并报告与基准值的差异。

• 部署后检查生产与测试环境
• 合并代码或更新依赖后验证修复
• 持续监控刚发布的网站

Build or modify adapters that connect Paperclip to AI agent runtimes. Covers server execution, configuration forms, terminal output, session persistence, and environment checks for CLI agents, HTTP endpoints, and custom processes.

中文简介正在准备中。当前显示英语简介。

• Connect a new CLI agent to Paperclip
• Add support for an HTTP agent endpoint
• Implement session resumption and recovery

Send research and analysis tasks to a running DeerFlow instance through its HTTP API, an interface for exchanging requests. Retrieve responses, continue conversations, upload documents, and inspect available models, skills, agents, and service health.

中文简介正在准备中。当前显示英语简介。

• Delegate research and analysis to DeerFlow
• Upload documents for a conversation
• Resume an earlier conversation

Check whether a web app is ready for PWA installation, which lets users install it like an app. Review HTTPS, app settings, icons, and offline responses, and identify missing or inconsistent configuration.

中文简介正在准备中。当前显示英语简介。

• Auditing a web app's readiness for PWA installation
• Checking settings before adding an install prompt
• Reviewing icon sizes and Android maskable icons

Audit important pages for settings that interfere with search indexing, including noindex directives, HTTP headers, and robots.txt rules. Identify accidental restrictions, suggest configuration fixes, and guide follow-up checks in Google Search Console.

中文简介正在准备中。当前显示英语简介。

• Investigating important pages missing from Google Search
• Checking for leftover staging restrictions after launch
• Reviewing CMS indexing settings for pages and categories

Audit article update dates across the visible page, HTTP response headers, and structured data that describes the article to search engines. Align these signals with substantive content changes and review how the CMS or build process updates them.

中文简介正在准备中。当前显示英语简介。

• Auditing update dates on articles and blog posts
• Reviewing CMS rules for updating modification dates
• Checking timestamps applied during static site deployments

Check and fix hreflang tags, which identify language and regional versions of web pages for search engines. Review rendered HTML and HTTP responses to find missing reciprocal links, incorrect language codes, and fallback settings.

中文简介正在准备中。当前显示英语简介。

• Auditing language and regional page settings
• Checking reciprocal links between language versions
• Reviewing fallback page settings

Audit and set up favicons, the small site icons used in browser tabs and search results. Check HTML links, image formats and dimensions, HTTPS access, and crawler restrictions, with guidance for ICO, SVG, and iOS icons.

中文简介正在准备中。当前显示英语简介。

• Checking a site's existing favicon configuration
• Setting up favicons for a new project
• Investigating missing icons in search results

Find and fix malformed HTML, including unclosed tags, incorrect nesting, and document structure errors. Inspect rendered HTML and HTTP responses to identify specific pages or templates with problems that may affect rendering and search engine parsing.

中文简介正在准备中。当前显示英语简介。

• Finding unclosed tags and incorrect nesting
• Investigating HTML-related rendering problems
• Checking HTML structure for search engine parsing

Review a website’s contact page for working contact methods and easy access from other pages. Add relevant contact information or forms, and inspect rendered HTML and HTTP responses to check the final page.

中文简介正在准备中。当前显示英语简介。

• Creating a dedicated contact page
• Checking contact methods and site navigation
• Reviewing rendered contact page output

Review web content for factual claims, figures, and quotations that need reliable sources. Identify missing citations, suggest relevant external links with clear link text, and check the rendered page and HTTP response.

中文简介正在准备中。当前显示英语简介。

• Checking sources for claims and figures in articles
• Adding links to official information and research
• Reviewing citation link text

Check whether pages clearly explain affiliate or sponsorship relationships before promotional links appear. Review the rendered HTML and HTTP responses, identify affected pages or templates, and suggest disclosure wording and placement that readers can easily understand.

中文简介正在准备中。当前显示英语简介。

• Checking disclosures before affiliate links
• Standardizing sponsorship notices across pages
• Reviewing rendered pages for disclosure issues

Analyze packet captures in a CTF sandbox by rebuilding communication sessions and decoding message contents. Recover transferred files and connect packet order, timing, and reconstructed streams to observed host or malware behavior.

中文简介正在准备中。当前显示英语简介。

• Rebuild TCP or UDP communication sessions
• Decode HTTP, DNS, or custom protocol messages
• Recover files transferred over the network

Simulate man-in-the-middle attacks, where traffic is intercepted between communicating systems, in authorized environments. Use Bettercap, Ettercap, and mitmproxy to test encryption enforcement, certificate validation, and network detection, then document findings and recommendations.

中文简介正在准备中。当前显示英语简介。

• Testing HTTPS enforcement and certificate validation
• Checking detection of network spoofing
• Demonstrating the risks of unencrypted traffic