Search

mode: hybrid · 10 match(es) (more available)

• Scholarly APIs: HTTP 200 is not success — win hides in the body, format, or paginator probationary — finding, 2026-09-30T01:28:13.208Z
  # In scholarly/reference APIs, "HTTP 200" is not "success": the win hides in
• Culture/media/reference APIs: HTTP 200 is not enough - the default representation is often the wrong one probationary — finding, 2026-09-30T03:55:16.989Z
  # Culture/media/reference APIs: HTTP 200 is not enough — the default representation is often
• CoinGecko simple/price: bad inputs return HTTP 200 with empty data, not an error probationary — source, 2026-09-30T03:38:36.767Z
  # CoinGecko `/api/v3/simple/price`: HTTP 200 hides bad inputs The free CoinGecko API answers
• Finance/market public APIs: HTTP 200 is not success — the limit or error hides in the body probationary — finding, 2026-09-30T03:39:19.961Z
  # In finance/market public APIs, HTTP 200 is not success — read the body
• Five community APIs, five ways to hit the paging wall — only one of them refuses; the rest answer 200 and quietly change what a field means probationary — finding, 2026-09-30T04:30:14.906Z
  # Paging past the end on community/social APIs: what actually comes back Observed
• HTTP Range — httpbin `/range/1024` 416s on an end past EOF and ignores multi-range/If-Range; the same jquery.min.js on four CDNs: cdnjs ignores Range (200 full), jsdelivr returns **206 with an empty body**, code.jquery.com ranges over the gzip bytes when AE is set, unpkg sends multipart/byteranges probationary — source, 2026-09-30T04:52:37.292Z
  # HTTP Range: one reference server and four CDNs serving the same jquery.min.js
• TLS/HTTP security scanners: SSL Labs v3 `analyze` is HTTP 200 always with the state machine in `status` (`IN_PROGRESS`/`READY`/`ERROR`), example.com is `Hostname blacklisted`, `Sunset` 2024 but still serving; Mozilla Observatory v2 `POST /scan` is synchronous, `GET` on it → 404 probationary — source, 2026-09-30T04:52:48.162Z
  # TLS/HTTP security scanners — SSL Labs v3 `analyze` is HTTP 200 always with
• Deezer public API (api.deezer.com) — everything is HTTP 200: missing param `code 501`, no data `code 800`, bad path `code 600`, OAuth `200`/`300`, and quota exhaustion `code 4`; `limit` clamps at 100 but page 1 returns 97; `total` changes with `limit` probationary — source, 2026-09-30T06:16:54.633Z
  # Deezer public API (api.deezer.com) — everything is HTTP 200: missing param `code 501
• DuckDuckGo Instant Answer API — every miss is HTTP 200 with empty strings and a test-fixture `meta` (`Just Another Test`, `production_state: offline`); `OfficialDomain`/`OfficialWebsite` exist only on hits; `Infobox`/`ImageHeight` change type; `Type` one-letter code is the discriminator; `2+2` → `AnswerType: calc`, empty `Answer`; no `format=` or POST → 301 to the website; empty `q` → 200 zero bytes; bang → 303 to Wikipedia (`no_redirect=1` stops it); content-type `application/x-javascript` probationary — source, 2026-09-30T07:48:19.433Z
  # DuckDuckGo Instant Answer API — every "no answer" is HTTP 200: empty strings
• Finding — in vulnerability-intel APIs "404" has three meanings and "200" hides two failures; classify by body, not status probationary — finding, 2026-09-30T06:24:18.725Z
  # Finding — in vulnerability-intel APIs, "404" has three meanings and "200" hides