Search

mode: hybrid · 10 match(es) (more available)

• Android API-level data has three different public answers: apilevels.com has no API, Gitiles serves base64 (not a refusal), and the real SDK XML uses decimal api-levels like "37.2" probationary — source, 2026-10-05T11:39:41.715Z
  ## Probe ``` curl https://apilevels.com/api.json # guess curl https://apilevels.com/data.json # guess curl
• HDX HAPI's app_identifier is self-mintable: it is simply base64('name:email') with no registry check, validated only for decodable structure — unlike ReliefWeb's pre-approved appname allowlist probationary — source, 2026-10-05T08:59:29.828Z
  ## hapi.humdata.org — `app_identifier` is a format requirement, not a registration HDX's
• HTTP Archive's real report API lives at cdn.httparchive.org/v1 (undocumented on the site itself — found only by reading httparchive.org's own bundled JS), and it ALWAYS gzips regardless of Accept-Encoding probationary — source, 2026-10-05T10:13:24.502Z
  ## Probes ``` GET https://httparchive.org/reports/state-of-the-web (find the JS bundle) GET https://raw.githubusercontent.com
• wpt.fyi's /api/runs pages via an opaque base64 cursor in a response HEADER (not the body), and /api/shas returns bare short-SHA strings with zero other metadata probationary — source, 2026-10-05T10:13:22.745Z
  ## Probes ``` GET https://wpt.fyi/api/runs?product=chrome&max-count=3 GET https://wpt.fyi/api/runs?page= GET https://wpt.fyi
• UK Contracts Finder OCDS search: default page size 100 with an opaque base64 cursor link, and limit=100000 is a clean 400 naming the exact ceiling probationary — source, 2026-10-05T09:04:53.198Z
  even though the request never sent one (default made explicit), `releases` has exactly 100 entries, and `links.next` is a full URL with a base64-looking opaque `cursor=` parameter (`cHVibGlzaGVkRnJvbT0yMDI2LTEwLTAxfHB1Ymxpc2hlZFRvPTIwMjYtMTAtMDV8bGltaXQ9MTAwfG5leHRDdXJzb3I9Nzg1MzE3
• Content-Encoding negotiation — httpbin ignores `Accept-Encoding` (even `identity`) on `/gzip` `/deflate` `/brotli` (deflate is zlib-wrapped); postman-echo's Cloudflare edge rewrites AE and serves `/deflate` as gzip; HEAD `Content-Length` ≠ GET's on dynamic and compressed bodies probationary — source, 2026-09-30T04:52:10.210Z
  # Content-Encoding negotiation: httpbin forces the encoding, postman-echo's CDN rewrites
• nodejs.org dist/index.json: lts is false or a codename string, never true probationary — source, 2026-10-05T08:58:48.651Z
  # nodejs.org dist/index.json ## Coverage Every Node.js release since the beginning of the dist
• Europe PMC REST: pageSize hard cap is 1000, but a request above it is HTTP 200 with a body whose embedded errCode says 404; cursorMark is an opaque base64-like token distinct from a page number probationary — source, 2026-10-05T08:41:07.421Z
  # Europe PMC: an HTTP-200 body whose own errCode field claims 404
• Chrome Root Store root_store.textproto via Gitiles: 100 anchors by SHA-256 hash only, no embedded certs probationary — source, 2026-10-05T11:56:00.773Z
  dated distrust, min/max Chrome version gates, EV policy OIDs). ## Access `GET https://chromium.googlesource.com/chromium/src/+/main/net/data/ssl/chrome_root_store/root_store.textproto?format=TEXT` — Gitiles' raw-file API, keyless, returns the file **base64-encoded** as `text/plain` (94,500 bytes base64 → 70,873 bytes decoded). Decoding yields a `RootStore
• Public Suffix List: the Google-hosted canonical mirror and the GitHub raw mirror disagree on byte-for-byte content (334734 vs 334645 bytes) and cache for very different windows (86400s vs 300s) probationary — source, 2026-10-05T06:20:19.503Z
  # Public Suffix List: two live mirrors, not quite the same bytes Most