Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Some samples containing false positive keywords #25

Merged
merged 1 commit into from
Jun 6, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions testcases/00/02/95284b1305474e3a365ca48db426.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
POST /cgi/capi?cmd=DescribeSiteMsgSummary&action=delegate&serviceType=message&secure=1&version=3&dictId=2363&sts=1&t=1688384173529&uin=100003290640&ownerUin=100003290640&csrfCode=2093508630&msg=1%20and%201=1%20is%20a%20very%20basic%20mathematical%20operation HTTP/1.1
Host: console.cloud.tencent.com
Content-Length: 101
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
X-Life: 1048
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Content-Type: application/json
Accept: application/json, text/javascript, */*; q=0.01
X-Requested-With: XMLHttpRequest
X-Lid: Sk-3z4xFh
Sec-Ch-Ua-Platform: "Windows"
Origin: https://console.cloud.tencent.com
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://console.cloud.tencent.com/message/detail/547411489
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

{"regionId":1,"serviceType":"message","cmd":"DescribeSiteMsgSummary","data":{"Version":"2018-12-25"}}
22 changes: 22 additions & 0 deletions testcases/00/06/005a52981dd324c40488a1a588f9.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
POST /speed?id=9GkL9SLGjnYrr8bJd6&uin=&version=1.35.26&content=For%20people%20who%20write%20code,%20the%20ability%20of%20compiled%20languages%20%E2%80%8B%E2%80%8B<script%20%20ability,%20but%20it%20>%20the%20capabilities%20of%20regular%20expressions&aid=9f77cd42-08ce-4d1b-9d16-42d90e1f7792&env=production&platform=3&netType=4&vp=0%20*%200&sr=1920%20*%201080&sessionId=session-1688375712738&from=https%3A%2F%2Fwebpage.qidian.qq.com%2Fqidian%2Fchatv3%2Fpc.html&referer=https%3A%2F%2Fmodao.cc%2F HTTP/1.1
Host: rumt-zh.com
Content-Length: 678
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Platform: "Windows"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryJl8O6PWudNUIcH6F
Accept: */*
Origin: https://webpage.qidian.qq.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://webpage.qidian.qq.com/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

------WebKitFormBoundaryJl8O6PWudNUIcH6F
Content-Disposition: form-data; name="payload"

{"duration":{"fetch":[],"static":[{"url":"https://bqq.gtimg.com/CDN/source/audio/ring.mp3","method":"get","duration":144.9,"status":200,"type":"static","isHttps":true,"urlQuery":"","domainLookup":0,"connectTime":0}]},"id":"9GkL9SLGjnYrr8bJd6","uin":"","version":"1.35.26","aid":"9f77cd42-08ce-4d1b-9d16-42d90e1f7792","env":"production","platform":3,"netType":4,"vp":"0 * 0","sr":"1920 * 1080","sessionId":"session-1688375712738","from":"https%3A%2F%2Fwebpage.qidian.qq.com%2Fqidian%2Fchatv3%2Fpc.html","referer":"https%3A%2F%2Fmodao.cc%2F"}
------WebKitFormBoundaryJl8O6PWudNUIcH6F--
14 changes: 14 additions & 0 deletions testcases/00/07/00071dbf87818e947d2690e9a9ed9c3b.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
POST /i/14029/da/?type=multi&wid=695672&sid=CC44727D8E38AE81538BAA13BD4D0A2545&pvid=1688382620847&dnt=1&dc=The%20union%20leaders%20select%20their%20representatives%20from%20among%20the%20members.&dv=1&dl=337&retryCode=socketNotConnected HTTP/1.1
Host: collection.decibelinsight.net
Content-Length: 337
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Content-Type: text/plain;charset=UTF-8
Accept: */*
Origin: https://www.ibm.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

[{"type":"proxyUrls","data":{"prefix":"https://proxy.decibelinsight.net/v2-us-east-1/695672/2023-07-03/www.ibm.com/","items":["https/collector-12553.tvsquared.com/tv2track.php?idsite=TV-8172454563-1&rec=1&rand=%3CRANDOMNUMBER","https/collector-12553.tvsquared.com/tv2track.php?idsite=TV-8172454563-1&rec=1&rand=9167618174"]},"offset":0}]
14 changes: 14 additions & 0 deletions testcases/00/74/00741c5954a957427dc6da810e141d68.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
GET /new/helloService.ashx?vg=We%20need%20to%20select%20a%20few%20items%20from%20this%20list%20for%20family%20next%20meeting.80&_=1688375748903 HTTP/1.1
Host: passport.jd.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Platform: "Windows"
Accept: */*
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://search.jd.com/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

20 changes: 20 additions & 0 deletions testcases/00/91/00914c32c3c93681ab05d607a6beaccf.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
GET /fd/ls/l?IG=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively.&Type=Event.ClientInst&DATA=[{%22T%22:%22Info%22,%22FID%22:%22CI%22,%22Name%22:%22HasRR%22,%22Text%22:%221%22}] HTTP/1.1
Host: cn.bing.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Arch: "x86"
Sec-Ch-Ua-Full-Version: "114.0.5735.199"
Sec-Ch-Ua-Platform-Version: "15.0.0"
Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
Sec-Ch-Ua-Bitness: "64"
Sec-Ch-Ua-Model: ""
Sec-Ch-Ua-Platform: "Windows"
Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: image
Referer: https://cn.bing.com/search?q=site:segmentfault.com%20/static/css/static/fonts/abc.woff
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

16 changes: 16 additions & 0 deletions testcases/2d/21/2d210b84c723363f537696bc7e93ab39.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
GET /hopecgi?g_tk=1508769380&r=0.34307666399664916&callback=_CallbackjudgeLogin&cmd=judgeLogin&appid=1109634837&uin=389264167&msg=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
Host: game.qzone.qq.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
X-Requested-With: XMLHttpRequest
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Platform: "Windows"
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://game.qzone.qq.com/1109634837?via=QZSTORE.V6.TOP-WEEKLY&loginFromAppcenter=1688379348042
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
Connection: close

16 changes: 16 additions & 0 deletions testcases/2d/21/d81bef68377edb19334c4f4fa79fbcd1.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
GET /hopecgi?g_tk=1508769380&r=0.34307666399664916&callback=_CallbackjudgeLogin&cmd=judgeLogin&appid=1109634837&uin=389264167&msg=The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
Host: game.qzone.qq.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
X-Requested-With: XMLHttpRequest
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Platform: "Windows"
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://game.qzone.qq.com/1109634837?via=QZSTORE.V6.TOP-WEEKLY&loginFromAppcenter=1688379348042
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
Connection: close

17 changes: 17 additions & 0 deletions testcases/2d/32/2d32929f28f5e026ebf88f00b10318ce.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
GET /?msg=He%20made%20a%20plan:%20in%20the%20case%20when%20he%20wins%20the%20lottery,%20he%20will%20travel%20around%20the%20world.%20then,%20he%20can%20finally%20fulfill%20his%20dream. HTTP/1.1
Host: mygame.5054399.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Platform: "Windows"
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://my.4399.com/yxpkt/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
If-None-Match: "58574ffd-f"
If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
Connection: close

17 changes: 17 additions & 0 deletions testcases/2d/32/8807aa6c94559c411aab53979adaf5a8.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
GET /?msg=In%20the%20case%20when%20the%20battery%20runs%20out,%20the%20laptop%20will%20automatically%20shut%20down.%20then,%20you%27ll%20need%20to%20recharge%20it%20to%20use%20it%20again. HTTP/1.1
Host: mygame.5054399.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Platform: "Windows"
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://my.4399.com/yxpkt/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
If-None-Match: "58574ffd-f"
If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
Connection: close

17 changes: 17 additions & 0 deletions testcases/2d/32/d81bef68377edb19334c4f4fa79fbcd2.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
GET /The%20doctor%20advised:%20in%20the%20case%20when%20you%20feel%20chest%20pain,%20seek%20medical%20help%20immediately.%20then,%20we%20can%20address%20the%20issue%20promptly%20and%20effectively. HTTP/1.1
Host: mygame.5054399.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Platform: "Windows"
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://my.4399.com/yxpkt/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
If-None-Match: "58574ffd-f"
If-Modified-Since: Mon, 19 Dec 2016 03:11:57 GMT
Connection: close

12 changes: 12 additions & 0 deletions testcases/2d/8a/2d8a7d8395c78a694ee564b3e0e42d3b.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
GET /s?keyword=Can%20you%20help%20me%20select%20a%20suitable%20case%20for%20my%20new%20laptop? HTTP/1.1
Host: npm.staticblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Accept: */*
Origin: https://stackblitz.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://stackblitz.com/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

12 changes: 12 additions & 0 deletions testcases/2d/8a/7225d77be53bd040fbff677d3cb3aacf.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
GET /s?keyword=The%20judge%20carefully%20select%20the%20most%20representative%20case%20to%20set%20a%20precedent. HTTP/1.1
Host: npm.staticblitz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Accept: */*
Origin: https://stackblitz.com
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://stackblitz.com/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

21 changes: 21 additions & 0 deletions testcases/2d/98/23ba955e1507a0fd239d9e56808c96c1.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
GET /search?q=He%20select%20the%20strongest%20case%20to%20present%20to%20the%20jury.&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
Host: cn.bing.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Full-Version: "114.0.5735.199"
Sec-Ch-Ua-Arch: "x86"
Sec-Ch-Ua-Platform: "Windows"
Sec-Ch-Ua-Platform-Version: "15.0.0"
Sec-Ch-Ua-Model: ""
Sec-Ch-Ua-Bitness: "64"
Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: iframe
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

21 changes: 21 additions & 0 deletions testcases/2d/98/2d986f3957463936312e54fef8e82ee5.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
GET /search?q=The%20government%20has%20imposed%20a%20limit%20on%20the%20amount%20of%20water%20that%20can%20be%20drawn%20from%20the%20river.&sc=10-12&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
Host: cn.bing.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Full-Version: "114.0.5735.199"
Sec-Ch-Ua-Arch: "x86"
Sec-Ch-Ua-Platform: "Windows"
Sec-Ch-Ua-Platform-Version: "15.0.0"
Sec-Ch-Ua-Model: ""
Sec-Ch-Ua-Bitness: "64"
Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: iframe
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

21 changes: 21 additions & 0 deletions testcases/2d/98/6217e139528033c75f2abf16df27d16d.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
GET /search?q=We%20need%20to%20limit%20the%20number%20of%20people%20coming%20from%20other%20countries%20due%20to%20the%20current%20situation.&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
Host: cn.bing.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Full-Version: "114.0.5735.199"
Sec-Ch-Ua-Arch: "x86"
Sec-Ch-Ua-Platform: "Windows"
Sec-Ch-Ua-Platform-Version: "15.0.0"
Sec-Ch-Ua-Model: ""
Sec-Ch-Ua-Bitness: "64"
Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: iframe
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

22 changes: 22 additions & 0 deletions testcases/2d/98/6f3957463936312e54fef8e82fe5.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
GET /search?q=Can%20you%20help%20me%20set%20a%20limit%20on%20the%20data%20usage%20from%20my%20phone?%20I%20don%27t%20want%20to%20exceed%20my%20monthly%20plan.&qs=HS&pq=te+&sc=10-12&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
Host: cn.bing.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Full-Version: "114.0.5735.199"
Sec-Ch-Ua-Arch: "x86"
Sec-Ch-Ua-Platform: "Windows"
Sec-Ch-Ua-Platform-Version: "15.0.0"
Sec-Ch-Ua-Model: ""
Sec-Ch-Ua-Bitness: "64"
Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: iframe
Referer: https://cn.bing.com/search?q=modsecurity&filters=ufn%3a%22ModSecurity%22+sid%3a%22863a4021-961d-5d9b-9be1-4f1a555d3703%22&asbe=AS&qs=MB&pq=modsec&sc=10-6&cvid=AB071B8E32B4494FA036CB7051595CF0&FORM=QBLH&sp=1&lq=0
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

21 changes: 21 additions & 0 deletions testcases/2d/98/aa13861e16c9bbcabc91ba775e143e8e.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
GET /search?q=I%27m%20trying%20to%20limit%20my%20sugar%20intake%20by%20avoiding%20sweets%20from%20the%20candy%20store.sc=10-12&cvid=BBE72EDEE9C7441D829439A103ACAA74&FORM=QBRE&sp=1&lq=0&sid=1E50AA08396569DB1CB5B94B3803687C&format=snrjson&jsoncbid=0 HTTP/1.1
Host: cn.bing.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Full-Version: "114.0.5735.199"
Sec-Ch-Ua-Arch: "x86"
Sec-Ch-Ua-Platform: "Windows"
Sec-Ch-Ua-Platform-Version: "15.0.0"
Sec-Ch-Ua-Model: ""
Sec-Ch-Ua-Bitness: "64"
Sec-Ch-Ua-Full-Version-List: "Not.A/Brand";v="8.0.0.0", "Chromium";v="114.0.5735.199", "Google Chrome";v="114.0.5735.199"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: iframe
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

14 changes: 14 additions & 0 deletions testcases/2d/b6/7aafd258b7bd49f1466c953535710994.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
GET /?msg=In%20the%20case%20when%20the%20weather%20is%20sunny,%20we%20will%20go%20for%20a%20picnic.%20then,%20we%20can%20enjoy%20the%20outdoors. HTTP/1.1
Host: fe-static.xhscdn.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Platform: "Windows"
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://agree.xiaohongshu.com/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

14 changes: 14 additions & 0 deletions testcases/2d/b6/93e8adb238e637940d874e467597.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
GET /push/?data=The%20teacher%20explained%20the%20rule:%20in%20the%20case%20when%20a%20student%20is%20absent,%20they%20should%20inform%20the%20class%20beforehand.%20then,%20the%20class%20can%20proceed%20without%20them. HTTP/1.1
Host: fe-static.xhscdn.com
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Sec-Ch-Ua-Platform: "Windows"
Accept: */*
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: script
Referer: https://agree.xiaohongshu.com/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7

20 changes: 20 additions & 0 deletions testcases/92/49/913922b6c313eb1bc7c594324578da3f.white
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
GET /webapp/plugin/sangfor_databases/view/thread.html?p=The%20union%20select%20members%20from%20each%20department%20to%20form%20a%20committee. HTTP/1.1
Host: bbs.sangfor.com.cn
Cache-Control: no-cache
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Pragma: no-cache
Sec-Ch-Ua-Mobile: ?0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
X-Tingyun-Id: _jEJpwY16AA;r=379620656
Accept: application/json, text/plain, */*
X-Requested-With: XMLHttpRequest
If-Modified-Since: Mon, 26 Jul 1997 05:00:00 GMT
Sec-Ch-Ua-Platform: "Windows"
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://bbs.sangfor.com.cn/plugin.php?id=sangfor_databases:index
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7
Connection: close

Loading
Loading